CareSimple expands leadership to make value based care innovation more collaborative
Get Started

Devices

Platform

Services

Resources

Get Started

Devices

Platform

Services

Resources

Privacy Policy

Updated February 2024

Protecting your privacy is important to CareSimple Inc. and CareSimple Canada Inc. (“CareSimple,” the “Company”, “us” or “we”). This policy describes how the Company may use your data.

CareSimple Inc. and CareSimple Canada Inc. (“CareSimple”, “we”, “us”, or “our”) operate the CareSimple Solution, that is comprised of CareSimple Medical Devices, a CareSimple Patient Application, a CareSimple Clinical Portal and a CareSimple Secured Cloud altogether providing healthcare professionals with software solutions to support their Remote Patient Monitoring (RPM) programs.

CareSimple has a few online presences where this privacy policy applies, namely a corporate website, a product website and a software system to enable clinicians to remotely monitor their patients.

For its website, CareSimple uses the data you leave in the various contact forms to communicate back with you for sales, marketing and support services.

For its remote patient monitoring system, CareSimple has no plan to sell neither your Personal data nor Health data to anyone. CareSimple only sells to clinicians the secured data collection and patient engagement mechanisms, not the data itself. In essence for remote patient monitoring systems, CareSimple may monitor system’s usage in order to improve the software’s user experience or performance, to use anonymized data in order to provide aggregated community stats and trends, add online features to expand the usability and depth of its software offering.

This policy describes the extent of the use, protection and precaution that CareSimple will take in respect of your data.

By using the Services, you hereby consent to the collection, use, and disclosure of your Personal data (ex: name, email address) and your patients’ Personal data (ex: name, email address, Health data) in accordance with this Privacy policy.

Definitions:

Data Controller (or HCP, healthcare professional including supporting staff) means the natural or legal person who determines the purpose and the means of the processing of the Personal data;

Data Processor (or CareSimple including subcontractors) means the natural or legal person processing the Personal data on behalf of the Data Controller;

Data Subject (or User) means the physical person of which the Personal data has been collected pursuant to the Services;

Health data means data related to the physical and/or mental health of a natural person, including the provision of health care services, which reveal information about that natural subject;

Personal data means any information (including Health data) related to an identifiable natural individual and collected pursuant to the Services;

Services means the CareSimple website and all apps and software operated by CareSimple;

1. Why we collect your information:

We collect, use, disclose and process Personal data to provide you with the Services and to improve your user experience and technical support. CareSimple may use your Personal data to contact and correspond with you, to respond to your inquiries; to track communications with you; to perform safety backups of your Personal data; to assist you or your healthcare professional in tracking your Health Data; to generate global statistics (anonymized data will be used for this purpose); to help the Company develop new services and software features that meet your needs and to improve the Software.

2. What information we collect:

We collect Personal data from you in several different ways when you interact with our Services such as:

  • Active Personal data collection: You actively send information to us when you sign-up as a member of the Services, participate in surveys, respond to us or otherwise contact us. Depending on your choices, you may send us Personal data about yourself and/or others such as your email address, name, mailing address, phone number, birthday, and gender, as well as your child’s due date/birthday, name, gender or healthcare portal user key. At all times, you determine what information you want to actively share with us.
  • Health Data Processing: If you are using the Services in the course of the remote patient monitoring programs of a healthcare professional, you may actively send your Health Data throughout our Services to your healthcare professional. CareSimple shall only act as a Data Processor relating to your Health Data.
  • Passive Information Collection: We also collect information about how you use and interact with our Services. The collected information includes your IP address, the pages you visit within our Services, the date and time when you visit the website, the URL that referred you to our services, the device that you use to visit the website, and the device used when operating the app. We also collect usage information, such as which feature you are using, for how long and when, and demographic information, such as your gender and age, which we may prompt you for. The data collected does not identify you and is used to improve our Services’ performance and appearance through your account connection.
  • Third-Party Programs data: If you chose to connect Third-Party Applications, devices, websites or apps to the Services (Third-Party Programs), CareSimple will generally receive your Personal data collected by said Third-Party Programs in order to integrate same to the Services. The Third-Party Programs are not developed, sold or designed by CareSimple. Therefore, CareSimple does not warrant and is not responsible for the collection, use and disclosure of your Personal data made by Third-Party Programs. Disclosure of your Personal data to CareSimple by Third-Party Programs shall be pursuant to the Third-Party Program’s Privacy policy. However, if you chose to connect Bluetooth Devices directly supported by our Services, then no Third-Party shall be involved in collecting your data.

3. Necessary collection, use and disclosure:

CareSimple shall collect and use your Personal data only to the extent that is necessary to provide the Services and will not use your Personal data for purposes other than those why your Personal data was initially collected.

We keep your Personal data secured, encrypted and confidential and we do not disclose it, but note the following clarifications and exceptions:

  • Law enforcement: We may share your Personal data to respond to law enforcement requests, court orders or other legal process or if we believe that such disclosure is necessary to investigate, prevent or respond to illegal activities, fraud, physical threats to you or others or as otherwise required by any applicable law or regulation.
  • Bluetooth devices: At the user’s discretion, the Services may be connected by Bluetooth technology to health measuring devices. The manufacturers of these devices have elected to use Bluetooth LE (low energy) communication as a means of providing a “real-time” experience to users allowing immediate retrieval of data from their devices. The Services does not use Bluetooth for any other purpose. If you do not wish to have your Personal data transmitted by Bluetooth you may disable Bluetooth on your smartphone or similar device in the settings application for that device, or you may simply not connect (or disconnect if you have already connected) the devices that require Bluetooth on the Software.
  • Cellular devices: At the user’s discretion, the Services may be connected by cellular technology to health measuring cellular devices. The manufacturers of these cellular devices have elected to use cellular communication as a means of providing a “real-time” experience to users allowing immediate retrieval of data from their devices. This cellular communication is part of the RPM service and does not use your own personal cellular connection. If you do not wish to have your Personal data transmitted by cellular you may ask to be remotely monitored by Bluetooth devices only.
  • Aggregated Statistics and Reports: We freely use and disclose data in anonymous form, for example, in statistics or reports.
  • Our employees and authorized independent contractors (“Authorized personnel”): Authorized personnel may have access to your Personal data for the purpose of helping us administer and run our Services (and not for their own, independent purposes). Authorized personnel access and use such Personal data in accordance with our instructions, on a “need to know” basis, and under defined strict confidentiality and security obligations.
  • Business transfers: CareSimple may be involved in the sale or transfer of some or all of its assets or other transactions. As part of that transaction, CareSimple may disclose your Personal data to the acquiring organization or other organization involved in the sale or transfer of some or all of its assets or other transactions, to the extent permitted by law, but will require such organization to agree to protect the privacy of your Personal data in a manner consistent with this Privacy policy and applicable law.
  • Express consent: CareSimple shall also disclose your Personal data at your express request.

4. Data Controller of your Health data:

By are using the Services in the course of your medical treatment by a healthcare provider, that healthcare professional shall obtain a verbal or written consent from you to collect, use and disclose your Personal data and Health data.

That healthcare professional may modify, add and/or erase your Personal data and Health data; may provide alerts to you through the Services and may share your Personal data and Health data with its clinical staff or healthcare partners who require access to patient information, within the requirements of the applicable regional privacy laws such as the Privacy and Security Rules of Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). In addition, your Personal data and Health data may also be used or disclosed by the healthcare professional for the his business partners or other purposes of healthcare treatment, payment (including but not limited to health insurance claims and reimbursement) and operations of the medical practice, as well as for other purposes permitted by applicable laws. 

At all times, Your healthcare professional is the Data Controller of Health data. CareSimple shall act as the Data Processor of your Health data for your healthcare provider.

5. Personal data Hosting and Storing:

Except for non-identifiable and anonymized information which CareSimple may store in perpetuity and in any reasonable location, CareSimple shall host and store your Personal data for a maximum of 6 months after you delete your account, ask for the deletion of your account or have your account deleted by your healthcare professional. After such period, CareSimple may delete your stored Personal data, with respect to the applicable laws. 

Your Personal data may be stored in locations outside of your state or country with respect to the applicable regional laws, such as, but not limited to, the HIPAA of the United States of America, the Personal Information Protection and Electronic Documents Act of Canada, and the Québec’s Privacy Act, Law 25.

Furthermore, in compliance with the California Consumer Privacy Act (CCPA) § 1798.105 and the Confidentiality of Medical Information Act (CMIA) § 56.11, CareSimple shall ensure the protection and confidentiality of your Personal and Health data as required by California law.

6. Access and Update:

You have the right to access and obtain copies of your Personal data. You also have the right to update, rectify and correct any Personal data that you believe is inaccurate or incomplete. To do so, please contact our Privacy officer at [email protected].

7. Withdrawal of consent and Opt-out:

If you do not agree with our methods of using your Personal data as set out in this Privacy Policy, you may withdraw your consent to the use, collection and disclosure of your Personal data. To do so, please contact CareSimple’s Privacy officer at [email protected]. Additionally, we routinely provide “opt out” or “unsubscribe” instructions on our Electronic Communications to provide for your removal from future Electronic transmissions.

8. Generally not suitable for children under the age of [13]:

CareSimple Services are not intended for children under the age of 13. We do not knowingly collect Personal data via the Services from users in this age group. We do, however, collect information about children and babies provided by the parents or legal guardians of such children or babies. We ask our Services’ users not to provide information about any baby or child without first getting their parents’ or legal guardians’ consent. By providing Personal data regarding any baby or child, you are affirming that you are legally authorized to do so. We encourage parents and legal guardians to talk to their children about their use of the Internet and the information they disclose pursuant to the Services.

In the event that the Services have been used by a child under the age of 13 to store information of that child without parental consent, CareSimple shall be and is authorized to delete, in its entirety, any of the information stored. CareSimple also reserves the right to revoke any license to use the Services which is being used by a child under the age of 13.

As we also do not intentionally collect or maintain information in the Services from those visitors and Users of the Services who are under 18 years old.

9. Third-Party Programs:

CareSimple is not responsible for the behavior, features or content of linked Third-Party Programs, or Third-Party Programs framed within the services, or provided as search results and does not make any representations regarding their content or accuracy. Your use of these Third-Party Programs is at your own risk and is subject to their terms of use and Privacy policy. CareSimple does not endorse any product, service, or treatment advertised in the Services. CareSimple will have no liability with respect to any loss or damage of any kind incurred as a result of any in the Services.

10. Security

CareSimple uses commercially reasonable and appropriate physical, electronic, and managerial procedures to safeguard and secure the Personal data we collect. However, CareSimple can’t fully eliminate security and/or privacy risks associated with Personal data created, stored or transferred using the internet and internet technologies.

CareSimple, as the Data Processor, shall not be liable for any breach, unauthorized disclosure or unlawful use of your Personal data or Health data that was, at the time of the breach, under the control of your healthcare professional.

11. Electronic communications (E-mails):

Your email address may be used to send you Electronic Communications from time to time. At any time, you may ask us to stop sending you Electronic Communications by contacting [email protected] or using the unsubscribe clickable mechanisms provided at the bottom of such communication.

12. Changes to this Privacy Policy

We reserve the right to amend this Privacy policy from time to time without any prior notice or warning. 
The collection, use and disclosure of your Personal data by CareSimple will be governed by the latest version of this Policy. New versions of this Policy will be posted at https://www.caresimple.com/en/privacy-policy

13. End User License Agreements:

The End User License Agreement, available at https://caresimple.com/terms-of-use and governing your use of the Services (and which may be viewed from the info page of the software) contains important provisions disclaiming and excluding the liability of CareSimple and others in relation to your use of the Services, and provisions determining the applicable law and exclusive jurisdiction for the resolution of any disputes regarding your use of the Services. Each of those provisions also applies to any disputes that may arise in relation to this Policy and the collection, use and disclosure of your Personal data, and are of the same force and effect as if they had been reproduced directly in this Policy.

14. Do Not Track:

While many current browsers permit you to send a signal to us about your Do Not Track (“DNT”) preferences, we do not respond or support DNT signals sent from your browser.

15. Access, Comments, and Questions

To get the best use of the Services, please keep your information accurate, current, and complete by routinely updating your user profile. If you have any questions, comments or concerns regarding this Privacy Policy, please contact our Privacy Officer:

CareSimple Inc.

ATTN: PRIVACY OFFICER

3801 PGA Blvd, Suite 600

North Palm Beach, FL 33410

CareSimple Canada Inc.
ATTN: PRIVACY OFFICER
75 Queen St, Suite 1400
Montreal, QC, Canada, H3C 2N6

Email: [email protected]
Website: https://www.caresimple.com