Consumer Health Data Privacy Policy
Effective date:
About This Policy
Salix Compass is an independent Washington-based 501(c)(3) nonprofit. This policy addresses consumer health data covered by the Washington My Health My Data Act and supplements our Privacy Policy.
This policy supplements our general Privacy Policy. General descriptions of website technology, service providers, or information use do not authorize the collection, use, or sharing of consumer health data beyond what applicable law permits. Additional consumer health data protections described here apply where relevant.
Consumer health data includes personal information linked or reasonably linkable to an individual that identifies their past, present, or future physical or mental health status. Depending on the circumstances, this can include information about health services sought or received and information used to infer health status.
Our Current Services
Our current service focus is in-office dispensing readiness assessments for independent physician and specialty practices, beginning in Washington. We also provide public informational resources.
We are not currently accepting individual patient assistance requests. Weaver Crest is not currently offered as a public patient-intake or patient-record platform.
Please do not submit patient information.
Website forms and general email are intended for business inquiries, not medical records or clinical intake. Do not include patient names, dates of birth, diagnoses, prescriptions, insurance identifiers, or other identifiable health information.
Categories and Sources of Information
Our public inquiry process requests professional contact and practice information, not patient-level information. Nevertheless, a person may include health information in a message even when we have not requested it.
If health information is included in a submission, it may contain:
- Contact details linked to information about an individual’s health.
- Information about medications, treatment, health conditions, or health services sought or received.
- Information about insurance, financial assistance, or access barriers when linked to an individual’s health needs.
These examples describe information that could be included in an unsolicited submission. They are not an invitation to provide it. The source may be the individual sending the message or another person who includes someone else’s information.
Purposes and Permissions
Our intended purpose for public inquiries is to communicate about our organization and professional services without collecting patient information.
If health information reaches us unexpectedly, our response is limited to appropriately addressing the submission, protecting the information, handling a privacy request, or meeting an applicable legal obligation. Its receipt does not enroll anyone in a service or authorize unrelated use.
Publishing this policy is not a request for consent. Where consent is required for collecting or sharing consumer health data, we will obtain it through a separate process before the activity occurs.
Sharing and Sale
We do not sell consumer health data or authorize its use for targeted advertising.
Information submitted through our communication channels may be processed by service providers supporting website hosting, message delivery, email, and document storage. If a submission contains health information, those providers may process the information as part of operating the relevant service.
Our operating policy is not to disclose consumer health data to independent third parties or affiliates for their own purposes, except with any required authorization or where permitted or required by applicable law.
Analytics and advertising tools are not approved channels for receiving patient information. Any proposed service involving patient-data exchange requires a separate review of recipients, permissions, agreements, and safeguards.
Your Washington Privacy Rights
Where the My Health My Data Act applies, you may:
- Confirm and access: Ask whether we collect, share, or sell your consumer health data and request access to covered data.
- Learn about recipients: Request a list of third parties and affiliates with whom your consumer health data has been shared or sold, including their contact information.
- Withdraw consent: Withdraw consent for the collection or sharing of your consumer health data.
- Request deletion: Request deletion of your consumer health data, subject to applicable legal requirements.
- Appeal a denial: Appeal a decision denying your privacy request.
You may contact us even if you are unsure whether we hold information about you.
Requests, Questions, and Appeals
Send privacy requests to hello@salixcompass.org. You may also contact jarmstrong@salixcompass.org.
Use the subject “Consumer Health Data Request” and describe the right you wish to exercise. Do not attach medical records, identity documents, or other sensitive information to your initial message.
We may request information reasonably necessary to authenticate a request. We will respond within applicable statutory timeframes and explain any permitted extension or denial.
To appeal a denial, reply to our decision or email the addresses above with the subject “Consumer Health Data Appeal.” Explain why you believe the decision should be reconsidered.
We will communicate the appeal decision and our reasons. If an appeal is denied, we will explain how to contact the Washington State Attorney General to submit a complaint.
Changes to Our Practices
We will update this policy when our consumer health data practices change. Before beginning a new collection, use, or sharing activity, we will provide any required notice and obtain any required consent. An updated policy alone does not replace consent where consent is required.