HIPAA · Notice of Privacy Practices

Your health information, protected.

Effective date — July 23, 2026

This notice describes how your medical information may be used and disclosed, and how you can access this information. Please review it carefully.

Eva MD ("Eva MD," "we," "our," or "us") is committed to protecting the privacy and security of your protected health information ("PHI"). This Notice of Privacy Practices describes how your PHI may be used and disclosed in connection with the healthcare services provided through the Eva MD platform, as well as your rights regarding that information.

Healthcare services are provided by licensed healthcare providers practicing through Eva MD's affiliated medical group(s). PHI is handled in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), its implementing regulations, and other applicable federal and state privacy laws.

Treatment

We may use your PHI to evaluate your medical condition, provide medical treatment, prescribe medications, coordinate care with other healthcare providers, communicate with pharmacies, and manage your ongoing healthcare.

Payment

We may use and disclose your PHI to obtain payment for healthcare services, process billing, verify eligibility, and perform other payment-related activities.

Healthcare operations

We may use your PHI to improve the quality of our services, conduct quality assurance activities, perform compliance reviews, credential providers, manage business operations, train personnel, and maintain the security and effectiveness of our platform.

Business associates

We may share PHI with trusted third-party service providers that perform functions on our behalf, including electronic medical record vendors, technology providers, payment processors, pharmacies, laboratories, and other vendors who are contractually required to safeguard your information in accordance with HIPAA.

As required by law

We may disclose PHI when required by federal, state, or local law, court order, subpoena, or other lawful governmental request.

Public health and safety

We may disclose PHI to public health authorities or other authorized entities for purposes permitted by law, including disease reporting, adverse event reporting, and activities necessary to prevent or lessen a serious threat to health or safety.

Law enforcement and government requests

We may disclose PHI to law enforcement officials, regulatory agencies, or government authorities when authorized or required by law.

Except as otherwise permitted by law, we will obtain your written authorization before:

Using or disclosing PHI for marketing purposes where authorization is required.
Selling your PHI.
Making other disclosures not otherwise permitted by HIPAA.

You may revoke your authorization at any time in writing, except to the extent we have already relied upon it.

Right to access

You may request access to or receive a copy of your medical records and other PHI maintained by us, subject to applicable legal limitations.

Right to request amendments

If you believe information in your medical record is inaccurate or incomplete, you may request that it be amended.

Right to request restrictions

You may request restrictions on certain uses or disclosures of your PHI. While we will consider all requests, we are not required to agree to every requested restriction unless required by law.

Right to confidential communications

You may request that we communicate with you using alternative methods or at alternative locations.

Right to an accounting of disclosures

You may request a record of certain disclosures of your PHI made by us, as permitted under HIPAA.

Right to receive a copy of this notice

You have the right to receive a paper or electronic copy of this Notice at any time.

We are required by law to:

Maintain the privacy and security of your protected health information.
Provide you with this Notice of Privacy Practices.
Notify you following a breach of unsecured PHI when required by law.
Follow the terms of this Notice currently in effect.

We reserve the right to revise this Notice at any time. Any revised Notice will apply to all PHI maintained by us and will be posted on our website with an updated effective date.

Attention: Privacy Officer
Entity: Eva MD Inc.
Address: 11700 NW 101st Rd., Suite 6, Medley, FL 33178
Email: privacy@evamd.com