Last Updated: August 27th, 2025
This Health Data Privacy Notice supplements the Fathom Care Privacy Notice and provides additional information about how we collect, use, and disclose health data as required by laws like Washington's My Health My Data Act and Nevada's Consumer Health Data Privacy Law.
COLLECTION OF HEALTH DATA
Depending on what you choose to share, we may collect the following categories of health data:
- Information about your conditions, diagnoses, and treatments/interventions;
- Information about your surgeries and procedures; and
- Information about your symptoms, medications, bodily functions, and vital signs.
SOURCES OF HEALTH DATA
We collect health data directly from you when you create an account, use the Services, request customer support, or otherwise communicate with us. We also collect health data through third party integrations you connect to the Services.
USE OF HEALTH DATA
We collect and use health data for the following purposes:
- Service Delivery: to provide and maintain our Services, including to provide support and guidance for those struggling with irritable bowel disease.
- Protection and Compliance: to detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of Fathom Care and others, and comply with our legal and financial obligations.
We may use health data for other purposes with your consent as required by law.
DISCLOSURE OF HEALTH DATA
We may disclose each of the categories of health data described above to the following categories of third parties:
- Vendors: vendors, service providers, contractors and consultants that need this information to provide services to us may access health data. For example, companies that assist us with web hosting and customer service may need access to health data to provide those functions.
- Research Partners: with your consent we may disclose aggregated or de-identified information to third-party research partners to advance scientific or academic research.
- Legal Authorities: we may disclose health data to legal authorities and others for the purposes described in the Protection and Compliance sub-section above, including if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Fathom Care, our users, the public, or others.
- Corporate Transactions: we reserve the right to disclose health data in connection with, or during negotiations of certain corporate transactions, including the merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
- Affiliates: we reserve the right to disclose health data between and among Fathom Care and any current or future corporate parents, affiliates, subsidiaries, and other companies under common control and ownership.
- Other Users: if you post health data on our Services, other users will be able to see that information.
- Consent: we may disclose health data when we have your consent or you direct us to do so.
YOUR RIGHTS
You can access or delete your health data or withdraw consent to our processing of your health data, subject to certain exceptions. To exercise any of these rights, email support@fathom.care.
If we deny your request to exercise one of those rights, you may appeal that decision by emailing privacy@fathom.care and including the word "APPEAL in the subject line.