CONNECTING TO OTHER APPS

You can sync info like your coverage and benefits, claims, prescriptions, and other information we maintain in our records. You can also get more info on providers.

If you choose to sync your health info, you’re giving us permission to share health information that we maintain in our records with your app. This info may include:

• Your claims and encounter information
• Certain clinical information we maintain, such as medications, allergies, immunizations, and lab results
• Other sensitive health information included in those records

Remember that your health app doesn’t have to follow the same HIPAA rules or privacy laws that we do. Each app has its own privacy policy. BlueCross cannot provide support for third-party apps. So please read your health app’s policy before you decide whether to sync your info. 

Learn more about your privacy rights and how to file a complaint with the Federal Trade Commission (FTC) or Office of Civil Rights (OCR).

• Will the app sell my info for any reason?
• Will it share my info with other companies for research or promotion?
• Will the app let me limit how it uses or shares my info?
• Is it easy to remove access to my info? How do I remove the app from my device?
• How will this app tell me about changes in privacy policies?
• Will the app collect non-health info, like my location?
• How does this app protect my information?
• Will sharing this info affect others, like my family?
• Can I see my info and make changes?
• Does the app answer questions and complaints? 

If you have any doubt, you may want to rethink letting your app access your health info.

We cannot provide support for your health app. If you have any questions or need help, please contact your app.

Covered Entities, Business Associates and HIPAA Enforcement. 

The U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) enforces the HIPAA Privacy, Security, and Breach Notification Rules. BlueCross BlueShield of Tennessee is subject to HIPAA as are most health care providers, such as hospitals, doctors, clinics, and dentists, and organizations who provide services to them or on their behalf. Individuals and organizations who are subject to HIPAA are called “Covered Entities” and “Business Associates.” Some Apps may be subject to HIPAA if they are providing services to, or on behalf of, a Covered Entity, such as your health care provider or health plan. You can find more information about your rights under HIPAA and who is obligated to comply with HIPAA here. 

You can file a complaint with OCR related to HIPAA requirements. To learn more about how to file a complaint with OCR go here. If you want to file a complaint with BlueCross, contact us. 

Apps and Privacy Enforcement 

Most Apps will not be subject to HIPAA. An App that publishes a privacy notice is required to comply with the terms of its notice, but generally is not subject to other privacy laws. Most Apps will instead fall under the jurisdiction of the Federal Trade Commission Act (FTC). The FTC protects against deceptive acts (such as an App that discloses personal data in violation of its privacy notice). 

The FTC also provides information about mobile App privacy and security for consumers. If you believe an App inappropriately used, disclosed, or sold your information, you should contact the FTC. You may file a complaint with the FTC using the FTC complaint assistant.