Menu

Website Consumer Guidance Content

Third Party App FAQs

MVP Health Care, Inc., on behalf of itself and its affiliates (collectively “MVP”), is offering a new way to access your information, including health records (“Information”). You can choose a third-party application (“Third Party App”) to request your Information on your behalf. Before choosing a Third Party App, it is important that you carefully review the Third Party App’s policies and procedures about how they secure and use your data.

Below is additional information about how to access your Information via a Third Party App, security considerations, and how to file a complaint if you believe that your Information was used or disclosed inappropriately.

  1. Is the Third Party App required to comply with HIPAA?

    MVP is a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”), which means that we are required to protect your information in accordance with HIPAA rules and regulations. Covered Entities under HIPAA (including health plans like MVP, health care providers, and health care clearinghouses) and Business Associates of covered entities, are required to protect your health information. Entities outside of this list, including most Third Party Apps, are not required to comply with HIPAA when collecting and using your health information. For this reason, you should be careful when sharing your information with Third Party Apps. You can find more information about patient rights under HIPAA and who is obligated to follow HIPAA here.

  2. What should I look for when selecting a Third Party App?

    When selecting a Third Party App, look for an easy-to-read privacy policy that clearly explains how the Third Party App will use your Information. If the Third Party App does not have a privacy policy, you should not use it. Below are a few additional questions you should consider when choosing a Third Party App:

    • What Information will this Third Party App collect? Will the Third Party App collect non-health data from my device, such as my location?
    • Will my Information be stored in a de-identified or anonymized form?
    • How will this Third Party App use my Information?
    • Will this Third Party App disclose my Information to third parties, or sell my Information for any reason (such as advertising or research)?
    • How can I limit this Third Party App’s use and disclosure of my Information?
    • What security measures does this Third Party App use to protect my Information?
    • What impact could sharing my Information with this Third Party App have on others, such as my family members?
    • How can I access my Information and correct inaccuracies in my Information?
    • Does this Third Party App have a process for collecting and responding to user complaints?
    • If I no longer want to use this Third Party App, or if I no longer want it to have access to my Information, can I terminate access or ask the Third Party App to delete my Information?

    You should be careful when choosing a Third Party App and confirm that it has strong privacy and security standards to protect your Information. If the Third Party App’s privacy policy does not clearly answer these questions, you should reconsider asking MVP to disclose your Information to the Third Party App.

  3. Can you recommend a Third Party App?

    MVP cannot provide recommendations. However, the Third Party Apps are required to satisfactorily complete MVP’s security attestation. Please inquire with MVP for a list of approved Third Party Apps, or approved by the CARIN Alliance CARIN My Health Application. To find out about the CARIN Alliance, click hereAbout Us – CARIN Alliance.

  4. How do I request my Information through a Third Party App?

    After you choose a Third Party App, you must authorize MVP to share your information with the Third Party Application.

  5. Can I access my Information without requesting them from a Third Party App?

    Yes, members and their dependents may still access Information though their online account or by contacting us at any of the phone number provided under #6 below.

  6. How can I file a privacy complaint?

    MVP. If you believe that MVP may have violated your privacy rights, you may file a complaint by contacting an MVP Customer Care Representative at:

    • MVP Medicaid Customer Care Center 1-800-852-7826 (TTY 1-800-662-1220)
    • MVP Medicare Customer Care Center 1-800-665-7924 (TTY 1-800-662-1220)
    • Customer Care Center for All Other MVP Members 1-888-687-6277 (TTY 1-800-662-1220)

    • Mail all written communications to:

      MVP CUSTOMER CARE CENTER

      PO BOX 2207

      SCHENECTADY NY 12301-2207

    Department of Health and Human Services. If you believe that MVP may have violated your privacy rights, you may file a complaint with the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR), the agency that regulates MVP’s use and disclosure of health information under HIPAA. You can file a complaint with OCR by using the OCR complaint portal available here.

    Federal Trade Commission (FTC). The FTC regulates how Third Party Apps use and disclose information under the Federal Trade Commission Act (FTC Act). The FTC Act, among other things, protects against deceptive acts (e.g., if an app shares personal data without permission, despite having a privacy policy that says it will not do so). If you believe a Third Party App has acted deceptively, you can file a complaint with the FTC using the FTC complaint assistant here.

For more information about MVP’s practices and how you can use our website, you can review our Website and Mobile Privacy Policy and Terms of Use.