Your rights and safety with non-Hennepin Health (third-party) health information apps

Your rights and safety with non-Hennepin Health (third-party) health information apps

You have the right to get your health information on your mobile device using a third-party health information app. Health information may include certain personal medical data, your health care claims data and provider information. (Certain health information is considered confidential under state and federal law and may not be viewed. This information may be available by calling Member Services.)

Hennepin Health does not have a health information app and does not require any member to use one. Third-party apps are provided by independent companies. In order for you to view your health information, it will be shared with the app.

When you use a third-party app, you authorize the sharing of your information. Any time this happens, there is some risk that your health information could be shared with others.

Choosing an app

If you are going to use a third-party health information app, you should take an active role to protect your information. Knowing what to look for as you choose your app can help you make a safer decision.

• Look for an easy-to-read privacy policy that clearly explains how the app will use your data.
• If the app does not have a privacy policy, you should use a different app.

Questions to ask yourself before choosing a third-party health information app

1. Will the app collect non-health data, for example the device location?
2. Will the app share or sell my data for any reason? If so, with whom? How can I prevent this (opt-out)?
3. What security measures does the app use to protect my data?
4. Does the app have a way to collect and respond to complaints?
5. If I decide to stop using the app, how do I make sure the app doesn’t keep my data?

It is important to choose an app with strong privacy and security standards. If the app’s privacy policy does not clearly answer these questions, you should use a different app.

How to get your health information through a third-party app

First, you must download the third-party app. You can do this by going to the app store in your device. Follow the instructions the app gives to download. 

• Not all apps will connect to Hennepin Health.
• You will need to work with the app provider to see if the app connects to Hennepin Health and provides your health information.
  

Once you have downloaded the app, you will need to create a Hennepin County account. This account will authenticate you and allow your health data to be released to the third-party app. You can create the Hennepin County account through the app or create the account ahead of time by following this guide (PDF, 1MB). (The Hennepin County account may be used to access other county resources and services.)

How to remove third-party app access to your health information

You can end third-party app access to your health information by removing your consent. Go here, select the app and click “No” under member consent.

What you can do if your app shares your data without permission, uses your data improperly or is hacked

You can file a complaint. Third-party apps are not typically covered by the Health Insurance Portability and Accountability Act (HIPAA). Most apps fall under the oversight of the Federal Trade Commission (FTC) and the protections of the FTC Act.

• You can file a complaint with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR).
  • File a complaint with OCR using the OCR complaint portal: https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf
  • File a complaint with OCR under HIPAA: https://www.hhs.gov/hipaa/filing-a-complaint/index.html
• You can file a complaint with the FTC using the FTC complaint assistant:
  ReportFraud.ftc.gov

You can also contact Hennepin Health at 612-596-1036 (800-647-0550) or TTY 711 (800-627-3529) with questions about your specific health information.

Approved by DHS 10/20/2021, HC-1227-CO