Website Consumer Guidance Content
Third Party App FAQs
MVP Health Care, Inc., on behalf of itself and its affiliates (collectively “MVP”), is offering a new way to access your information, including health records (“Information”). You can choose a third-party application (“Third Party App”) to request your Information on your behalf. Before choosing a Third Party App, it is important that you carefully review the Third Party App’s policies and procedures about how they secure and use your data.
Below is additional information about how to access your Information via a Third Party App, security considerations, and how to file a complaint if you believe that your Information was used or disclosed inappropriately.
Is the Third Party App required to comply with HIPAA?
MVP is a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”), which means that we are required to protect your information in accordance with HIPAA rules and regulations. Covered Entities under HIPAA (including health plans like MVP, health care providers, and health care clearinghouses) and Business Associates of covered entities, are required to protect your health information. Entities outside of this list, including most Third Party Apps, are not required to comply with HIPAA when collecting and using your health information. For this reason, you should be careful when sharing your information with Third Party Apps. You can find more information about patient rights under HIPAA and who is obligated to follow HIPAA here.
What should I look for when selecting a Third Party App?
- What Information will this Third Party App collect? Will the Third Party App collect non-health data from my device, such as my location?
- Will my Information be stored in a de-identified or anonymized form?
- How will this Third Party App use my Information?
- Will this Third Party App disclose my Information to third parties, or sell my Information for any reason (such as advertising or research)?
- How can I limit this Third Party App’s use and disclosure of my Information?
- What security measures does this Third Party App use to protect my Information?
- What impact could sharing my Information with this Third Party App have on others, such as my family members?
- How can I access my Information and correct inaccuracies in my Information?
- Does this Third Party App have a process for collecting and responding to user complaints?
- If I no longer want to use this Third Party App, or if I no longer want it to have access to my Information, can I terminate access or ask the Third Party App to delete my Information?
Can you recommend a Third Party App?
MVP cannot provide recommendations. However, the Third Party Apps are required to satisfactorily complete MVP’s security attestation. Please inquire with MVP for a list of approved Third Party Apps, or approved by the CARIN Alliance CARIN My Health Application. To find out about the CARIN Alliance, click hereAbout Us – CARIN Alliance.
How do I request my Information through a Third Party App?
After you choose a Third Party App, you must authorize MVP to share your information with the Third Party Application.
Can I access my Information without requesting them from a Third Party App?
Yes, members and their dependents may still access Information though their online account or by contacting us at any of the phone number provided under #6 below.
How can I file a privacy complaint?
MVP. If you believe that MVP may have violated your privacy rights, you may file a complaint by contacting an MVP Customer Care Representative at:
- MVP Medicaid Customer Care Center 1-800-852-7826 (TTY 1-800-662-1220)
- MVP Medicare Customer Care Center 1-800-665-7924 (TTY 1-800-662-1220)
- Customer Care Center for All Other MVP Members 1-888-687-6277 (TTY 1-800-662-1220)
Mail all written communications to:
MVP CUSTOMER CARE CENTER
PO BOX 2207
SCHENECTADY NY 12301-2207
Department of Health and Human Services. If you believe that MVP may have violated your privacy rights, you may file a complaint with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR), the agency that regulates MVP’s use and disclosure of health information under HIPAA. You can file a complaint with OCR by using the OCR complaint portal available here.