Security

Security Overview

At U.S. HealthRecord, we place the security and confidentiality of your healthcare information at the top of our priority list.  We highly value your trust and do everything in our power to incorporate the best practices and highest levels of security into our processes and protocols.

SSL Encryption

Security measures are in place to protect the loss, misuse, and alteration of the information on the Website, and we will take all reasonable steps to secure and safeguard this information. The site is secured with 128-bit Secure Socket Layer ("SSL") encryption technology, designed to keep your information secure and isolated from direct connection to the Internet. SSL encryption is an industry-standard technology and is used by financial institutions to protect your data.

Cookies

A cookie is a small amount of data, which often includes an anonymous unique identifier, which is sent to your browser from a website's computers and stored on your computer's hard drive. Cookies can be used to provide you with a tailored user experience and to make it easier for you to use a website upon a future visit. We may include cookies on our Site and use them to recognize you when you return to our Website. You may set your browser so that it does not accept cookies. Cookies must be enabled on your web browser, however, if you wish to access certain personalized features of our services.

Internet Security

IP Addresses

We may automatically receive and record information in our server logs from your browser, including your IP address (the Internet address of your PC), your computer's name, the type and version of your web browser, referrer addresses and other generally accepted log information. We may also record page views (hit counts) and other general statistical and tracing information, which will be aggregated with that of other users in order to understand how our Site is being used. None of this data contains personal information.

Computer Configuration

In order to determine whether your computer is supported by our system, we may collect certain anonymous information. This information includes, but may not be limited to, your operating system and browser, as well as the presence of any software that our Website may require to operate with your computer, or other third party software on your computer. This information is kept strictly confidential and is not shared with third parties, except as provided for in the Privacy Policy.

Data Center Security

Security measures are in place to protect the loss, misuse, and alteration of the information on the Website, and we will take all reasonable steps to secure and safeguard this information. Certain areas of the site are secured with 128-bit Secure Socket Layer ("SSL") encryption technology, designed to keep your information secure and isolated from direct connection to the Internet. SSL encryption is an industry-standard technology and is used by financial institutions to protect your data.

To prevent loss of information, all data is backed up periodically. All of your information is hosted offsite in an Internet data center and access to the hosted facility is controlled 24 hours a day. Our security systems are structured to deter and prevent hackers and others from accessing information you provide to us. We also use software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or to otherwise cause damage. Please understand, though, that we do not warrant as fail-proof the security of information provided by or submitted to U.S. HealthRecord. Due to the nature of Internet communications and evolving technologies, we cannot provide, and we disclaim, assurance that the information you provide us will remain free from loss, misuse, or alteration by third parties who, despite our efforts, obtain unauthorized access. Your personally identifiable information may also be subject to unauthorized access if you fail to keep your password secure. We have taken the following measures to protect your password and account information. You are solely responsible for maintaining the secrecy of your passwords and/or account information. Please be aware that U.S. HealthRecord is providing you the ability to store any relevant information, including sensitive information, on the Website and has adopted many levels of security to protect this information. However, any individual with your account information and password can access this information. Please be careful and responsible whenever you are online and change your password frequently.

Also, if you purchase or use a portable storage device to carry around your personal information and medical information, then that device, if lost, could be open and read by any unauthorized individual finding that device. In order to allow immediate access without having to recall a password, we do not password protect any portable storage device. The same ability that allows someone like a doctor or medic, whom you designate or authorize, to open and read the information on that portable storage device, would also allow an unauthorized person to see your medical record on that device. Therefore, if that device were to be found by an unauthorized person, he or she then could open the device and read your personal medical information.

Notice of Security Incident

If we detect, despite safeguards set out above, an intrusion or other unauthorized access to or use of personally identifiable information (an "Intrusion"), we will

(i) notify affected users of the Intrusion if the information at issue is sensitive, in our discretion

(ii) deliver this notice by the means we deem most efficient under the circumstances (such as, for example, first class mail or email)

(iii) use contact information for each affected user that is current in our files

(iv) use commercially reasonable efforts to accomplish these steps and effect this notice in a timely manner.

We have taken the following measures to enable you to remove or change any information that you enter. You can remove or change any information you store or provide to us by deleting the file or files you stored or changing the personal information you have provided. When you remove or change information, U.S. HealthRecord may retain that information in the form of back-up or archival data, but it will not be available readily on the web site.