Your rights regarding Protected Health Information collected through the ProviaRx platform
Who This Notice Applies To: This Notice applies to ProviaRx, LLC (DBA of Saha Services LLC), the technology platform operator. The independent licensed physicians and pharmacies who provide healthcare services through our platform have their own HIPAA privacy practices, which they will provide to you separately upon request.
When it comes to your health information, you have the rights described below. To exercise any of these rights, contact us at legal@proviarx.com.
You can ask to see or receive a copy of your health records and other health information we have about you. We will provide a copy or summary within 30 days.
You can ask us to correct health information about you that you think is incorrect or incomplete. We may say "no" to your request but will tell you why in writing.
You can ask for a list of the times we've shared your health information for up to six years prior to the date you ask, with whom we shared it, and why.
You can ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree, but will tell you if we cannot honor your request.
You can ask us to contact you in a specific way (e.g., email only, not phone) or to send mail to a different address. We will accommodate all reasonable requests.
You can ask for a paper copy of this Notice at any time. We will provide one promptly upon request, even if you have agreed to receive the notice electronically.
We share your health information with independent licensed physicians to facilitate clinical review of your health assessment. These physicians review your medical history, medications, symptoms, and goals to make independent prescribing decisions. If approved, your prescription information is shared with an independent licensed compounding pharmacy to dispense and ship your medication.
Example: Your completed health assessment, including medical history and current medications, is transmitted to an independent physician who reviews it to determine if GLP-1 therapy is clinically appropriate for you.
We use and share your health information to bill and collect payment for our subscription services. This includes sharing information with Stripe, Inc. (our payment processor) as necessary to process transactions.
Example: After physician approval, we use your information to set up your subscription and process payment for your first month.
We use your health information for internal business operations including quality improvement, training, auditing, and platform administration. This is always done using the minimum necessary information.
For uses not described above, we will ask for your written authorization. You may revoke an authorization at any time by contacting legal@proviarx.com. This includes:
We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it undertakes a compliance investigation or review.
We may share health information about you for certain public health activities and purposes including reporting adverse reactions to medications, preventing or controlling disease, and reporting vital statistics.
We may share information about you when necessary to prevent a serious and imminent threat to your health or safety or the health or safety of the public or another person.
We may share health information with law enforcement officials for limited purposes including responding to a court order, warrant, or lawfully issued subpoena.
We may share health information about you for workers' compensation or similar programs to the extent authorized and required by law.
ProviaRx is required by law to:
We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
⚠️ Minimum Necessary Standard: We make reasonable efforts to limit the use and disclosure of your PHI to the minimum necessary to accomplish the intended purpose of the use or disclosure.
We retain health records in accordance with applicable state and federal law. Texas law generally requires retention of medical records for a minimum of 7 years from the date of the last treatment, or for 10 years for minors (until the patient reaches age 21). We will not delete health records during the legally required retention period even upon your request.
After the retention period expires, health records are securely destroyed using methods that prevent reconstruction of the information.
In the event of a breach of unsecured Protected Health Information, we will notify you as required by the HIPAA Breach Notification Rule:
We reserve the right to change the terms of this Notice and to make the new Notice provisions effective for all Protected Health Information that we maintain. We will post the revised Notice on our website and, where required by HIPAA, provide individual notice of material changes.
The current effective version of this Notice is always available at proviarx.com/hipaa-notice.html.
If you believe your privacy rights have been violated, you may file a complaint with:
Email: legal@proviarx.com
We will investigate all complaints and respond within 30 days.
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Toll Free: 1-877-696-6775
Website: www.hhs.gov/hipaa/filing-a-complaint
✅ We will not retaliate against you for filing a complaint with us or with the U.S. Department of Health and Human Services.
For questions about this Notice or to exercise your HIPAA rights:
📧 legal@proviarx.com
ProviaRx · A DBA of Saha Services LLC · United States
Response within 30 days of receipt