THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
SAPIA Medical, PLLC (“SAPIA,” “we,” “us,” or “our”) is required by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”) to maintain the privacy of your protected health information (“PHI”), to provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and to notify affected individuals following a breach of unsecured PHI. We are required to abide by the terms of this Notice while it is in effect.
PHI is information about you, including demographic information, that relates to your past, present, or future physical or mental health condition, the provision of health care to you, or the past, present, or future payment for health care, and that identifies you or could reasonably be used to identify you.
This Notice applies to PHI created or received by SAPIA in connection with the telehealth services SAPIA provides, and to the workforce members, contractors, and business associates who create, receive, maintain, or transmit PHI on SAPIA's behalf.
The following categories describe the ways we are permitted to use and disclose PHI without your written authorization. Not every use or disclosure in a category is listed, but all permitted uses fall within one of these categories.
3.1 Treatment
We may use and disclose your PHI to provide, coordinate, or manage your health care, including consultations between the physician and other health care providers involved in your care, such as laboratories that perform testing on your behalf.
3.2 Payment
We may use and disclose your PHI to bill and collect payment for the services you receive. Because SAPIA operates on a cash pay basis and does not bill insurance directly, this category most often applies to processing your payment method or, at your request, providing you with a superbill for you to submit to your insurer for possible reimbursement.
3.3 Health Care Operations
We may use and disclose your PHI for our internal operations, including quality assessment, staff training, compliance review, and business planning.
3.4 Individuals Involved in Your Care or Payment for Your Care
With your agreement, or when we can reasonably infer from the circumstances that you do not object, we may disclose PHI to a family member, friend, or other person you identify as involved in your care or payment for your care.
3.5 As Required by Law
We will disclose PHI when required to do so by federal, state, or local law.
3.6 Public Health and Safety
We may disclose PHI for public health activities, including reporting to public health authorities, and to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law.
3.7 Health Oversight, Legal Proceedings, and Law Enforcement
We may disclose PHI to a health oversight agency for activities authorized by law, in response to a court or administrative order, or as otherwise required by law, including in response to a valid subpoena, warrant, or similar legal process.
3.8 Business Associates
We contract with third party service providers who need access to PHI to perform functions on our behalf, such as our electronic health record platform, laboratory partners, and pharmacy partners. These parties are bound by written business associate agreements requiring them to appropriately safeguard your PHI. Third party vendors include: Healthie EHR, Quest Laboratory, LabCorp, & GetLabs. Not all vendors may be used in your care.
Other than as described above, we will not use or disclose your PHI without your written authorization. This includes, in particular:
If you provide us with a written authorization, you may revoke it in writing at any time, except to the extent we have already relied on it.
5.1 Right to Inspect and Copy
You have the right to inspect and obtain a copy of PHI we maintain about you in a designated record set, with limited exceptions. Requests must be made in writing. We may charge a reasonable, cost based fee for copies.
5.2 Right to Request Amendment
You have the right to request that we amend PHI we maintain about you if you believe it is incorrect or incomplete. We may deny your request under certain circumstances permitted by law.
5.3 Right to an Accounting of Disclosures
You have the right to receive a list of certain disclosures of your PHI made by us in the six years prior to your request, excluding disclosures made for treatment, payment, health care operations, and certain other categories excluded by law.
5.4 Right to Request Restrictions
You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations. We are not required to agree to a requested restriction, except where the disclosure is to a health plan for payment or operations purposes and the PHI pertains solely to a service you paid for out of pocket in full, in which case we must honor the restriction.
5.5 Right to Request Confidential Communications
You have the right to request that we communicate with you about your health information by an alternative means or at an alternative location, and we will accommodate reasonable requests.
5.6 Right to a Paper Copy of This Notice
You have the right to obtain a paper copy of this Notice at any time, even if you agreed to receive it electronically.
5.7 Right to Notification of a Breach
You have the right to be notified if we discover a breach of your unsecured PHI, as required by law.
SAPIA provides services to patients located in Washington, Texas, and Florida. In addition to HIPAA, state law may impose privacy obligations that are more protective of patient information than HIPAA's federal floor, including but not limited to consumer health data laws that apply outside the traditional HIPAA covered entity framework, and state medical records privacy statutes.
We reserve the right to change this Notice at any time. Any revised Notice will be effective for PHI we already maintain as well as PHI we create or receive in the future. A copy of the current Notice will be made available to you upon request and posted at:
http://www.sapiamedical.com/notice-of-privacy-practices.
If you believe your privacy rights have been violated, you may file a complaint with SAPIA using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.
Office for Civil Rights, U.S. Department of Health and Human Services: 200 Independence Avenue, S.W., Washington, D.C. 20201, or www.hhs.gov/ocr/privacy/hipaa/complaints.
Questions about this Notice, or requests to exercise any of the rights described above, may be directed to:
SAPIA Medical, PLLC
Privacy Officer: Dr. Anastasia Collins
Address: 522 W. Riverside Avenue Ste N, Spokane, WA 99201
Email: Admin@sapiamedical.com
This Notice is effective as of September 17, 2026 and remains in effect until replaced.
.svg)
.svg)
.svg)
.svg)