Privacy Policy: Healthcare Billing Services

 MedTek First provides medical billing and revenue cycle management services. We operate as a Business Associate to healthcare providers and health plans ("Covered Entities") and are committed to maintaining the confidentiality of Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA).

1. Information We Collect

• Protected Health Information (PHI): We receive PHI from our clients (healthcare providers) to process claims. This may include patient names, dates of birth, Social Security numbers, medical diagnoses, and insurance details.
• Billing & Payment Data: Information related to healthcare claims, payments, and insurance coverage.
• Contact Information: Names, phone numbers, and email addresses provided directly by patients or providers for billing inquiries.

2. HIPAA Compliance & Business Associate Agreements (BAAs)

As a Business Associate, we only use and disclose PHI as permitted by our Business Associate Agreements with our clients and as required by the HIPAA Privacy and Security Rules. We apply the "Minimum Necessary" standard, ensuring our staff only access the specific data required to complete a billing task.

3. SMS Communications for Billing & Claims

Opt-in to receive text messages by texting QUESTION to 530-255-2135

(e.g., for claim status updates or balance and payment option information), the following terms apply:

• Purpose: SMS is used strictly for [billing notifications, and account status inquiries].
• Security Notice: Standard SMS is unencrypted. By opting in, you acknowledge that PHI sent via SMS may be at risk of interception by unauthorized third parties.
• Strict Non-Sharing: We do not share, sell, or rent your phone number or SMS opt-in consent with third parties for marketing or promotional purposes.
• Opt-Out: Text STOP to 530-255-2135 at any time to unsubscribe. Text HELP for assistance.
• Terms of Service: Messaging frequency may vary, mesage and data rates apply.

4. Data Security & Safeguards

We implement administrative, physical, and technical safeguards to protect electronic PHI (ePHI), including:

• Encryption: Data is encrypted both at rest and during transmission.
• Access Controls: Unique user IDs, multi-factor authentication (MFA), and automatic session timeouts.
• Audit Logging: We maintain detailed logs of who accesses PHI and when.

5. Your Rights

Under HIPAA, patients have rights regarding their PHI, including the right to access, amend, or receive an accounting of disclosures. Since we are a Business Associate, requests to exercise these rights should typically be directed to your healthcare provider.

6. Contact our Privacy Officer

For questions regarding our privacy practices or this policy, please contact:

Email: privacyofficer@medtekfirst.com