BaneyGroup LLC operates CareCompanion. This notice covers consumer health information, including information outside traditional healthcare privacy protections. It does not claim HIPAA certification. Read it together with our Privacy Policy. Access is by invitation; describing a feature does not enable it.
We collect health information you provide or authorize, such as records, history, diagnoses, medicines, results, procedures, claims, photos, questions, appointments and conversations. Derived explanations can also be health information. Identifiers and connection activity may reveal use of a health service. Sources include you, authorized helpers, systems and device records you connect, and requested app functions.
We use it to store and organize your care space, preserve sources, prepare questions, provide requested explanations/communication and track next steps. Permission to collect for the core service is distinct from optional connections, AI processing, calls and sharing. A general notice acknowledgment is not blanket permission. Only act for another person with authority.
Cloudflare hosts saved records and app processing. OpenAI receives selected information for requested reviews/authorized calls; Twilio handles authorized communication. Record sources/intermediaries handle requested connections. Authorized helpers, operators and chosen recipients receive information within their role or action. Email services handle messages actually sent. Auth0/sign-in providers and Expo/Apple/Google notification services handle separate identity or delivery information, which may reveal use of CareCompanion even without chart contents. The Privacy Policy identifies these services, inactive features and retention limits. Listing a recipient does not authorize a new transfer or establish that all of its copies have been erased.
We do not sell or rent personal health data or use it for targeted advertising, independent research or general-purpose AI training, including data with names removed. Disclosed services may perform the requested service and necessary service/security operations. A change to these uses needs the applicable advance notice and permission; a sale of the company does not itself supply that permission.
An enabled normal Apple Health connection uploads allowed categories and can continue when the app opens or resumes. An enabled Epic/MyChart connection uploads the permitted records from one user-started run. Neither is the temporary local-only iPhone check. Stopping retrieval does not erase saved, rejected or interrupted copies, delete provider originals or revoke a portal's separate permission. See the Privacy Policy for the separate phone/server stop controls, patient review and deletion process. Filing alone does not authorize AI or external sharing.
Request confirmation of handling, access, correction, recipient information, withdrawal or deletion through Help and support or brandon@baneygroup.com. No new account is required. Do not include medical documents or identity evidence in the initial email. We use proportionate verification and explain applicable rights, deadlines, refusals and further complaint options. Appeal at the same address using CareCompanion privacy appeal. The Privacy Policy's retention/deletion process applies; another person's care-space ownership is not a blanket reason to refuse a valid request. Applicable rights remain available without unlawful discrimination.