Telehealth: the apps ask for video and audio access and do not record or store the visit
If a healthcare organization offers telehealth appointments through the apps, joining one makes the apps ask permission to use the device's video and audio so the appointment can happen. Epic says the apps do not record or store video or audio data from these visits, and that they do not interact with health information exchanged during telehealth appointments.
Supporting quotations
If your healthcare organization offers telehealth appointments using our mobile apps, when you join a telehealth appointment with your provider, our mobile apps will ask for permission to access your device's video and audio functionality to make the appointment possible.
Our mobile apps do not record or store video or audio data from these visits.
Our mobile apps do not interact with any health information about you exchanged during any telehealth appointments.
Qualifications & exceptions
Applies only if the patient's healthcare organization offers telehealth through the apps.
The apps ask permission before accessing the device's video and audio.
The statements about not recording, storing or interacting are about the mobile apps; the passage does not describe what the healthcare organization or provider does with the visit.
Not stated here
The passage does not say whether the healthcare organization or provider records the visit.
Data Access & Collection · User right or choice
If you enable automatic appointment arrival, upcoming appointment identifiers and times are kept temporarily in the app
If a healthcare organization offers automatic appointment arrival and the patient turns it on, the apps temporarily store identifiers and times for the patient's upcoming appointments in app-private storage so the apps can detect arrival at an appointment. The identifiers are deleted if the patient stops using the apps or turns the feature off.
Supporting quotations
If your healthcare organization offers automatic appointment arrival and you choose to enable it, our mobile apps temporarily store identifiers and times for your upcoming appointments in app-private storage to detect your arrival at an appointment.
If you stop using our mobile apps or you disable automatic appointment arrival, the identifiers are deleted.
Qualifications & exceptions
Only applies if the healthcare organization offers the feature and the patient chooses to enable it.
The patient can turn the feature off, which triggers deletion.
The deletion sentence names the identifiers; it does not separately mention the appointment times.
Not stated here
This item does not say how arrival is detected, for example whether it uses location or Bluetooth.
Whether the stored appointment times are deleted along with the identifiers is not stated.
Data Access & Collection · User right or choice
Location access is optional and used only for location-based check-in or finding nearby providers
If a healthcare organization offers location-based check-in for in-person appointments or lets patients find providers near them, the patient may choose to let the apps temporarily interact with the device's location data for those purposes. Epic says the apps do not store or use location data in any other way.
Supporting quotations
If your healthcare organization offers location-based check in for in-person appointments, or allows you to find healthcare providers near you, you may choose to allow our mobile apps to temporarily interact with your device’s location data for those purposes.
Our mobile apps do not store or use your location data in any other way.
Qualifications & exceptions
Applies only if the healthcare organization offers location-based check-in or a nearby-provider search.
Access is the patient's choice.
The purposes are limited to location-based check-in and finding providers near the patient.
Not stated here
'Temporarily' is not defined.
The sentence says the apps do not store or use location data in any other way, which does not say whether location is stored for those two purposes.
Data Access & Collection · User right or choice
Bluetooth access is optional, used to tell front desk staff you have arrived, and not stored
If a healthcare organization lets patients notify front desk staff electronically when they arrive, the patient may choose to allow the apps to interact with their Bluetooth data for that purpose. Epic says the apps do not store Bluetooth data.
Supporting quotations
If your healthcare organization allows you to notify front desk staff electronically when you arrive for an appointment, you may choose to allow our mobile apps to interact with your Bluetooth data for this purpose.
Our mobile apps do not store your Bluetooth data.
Qualifications & exceptions
Applies only if the healthcare organization offers electronic arrival notification.
Access is the patient's choice.
Purpose is limited to the arrival notification.
Not stated here
The passage does not say what the apps do with Bluetooth data other than not storing it.
Data Access & Collection · Company practice
Calling a number shown in the app asks for phone access; call history and call data are not stored
If a patient chooses to call a phone number displayed in the apps, the apps ask permission to access the device's phone to place the call. Epic says the apps do not store the patient's call history or data about the call.
Supporting quotations
While you use our mobile apps, if you choose to call a phone number displayed within the app, we will ask for permission to access your device’s phone to place a call to the phone number.
Our mobile apps do not store your call history or data about the call.
Qualifications & exceptions
Applies when the patient chooses to call a number displayed within the app.
The apps ask permission first.
Not stated here
The passage does not say what the apps do with phone access beyond placing the call.
Data Access & Collection · Restriction or exception
Android disclosure: microphone only for voice navigation and camera roll only for a profile image
In the Android disclosures, Epic says the apps interact with the microphone only if the patient uses the microphone to navigate the apps, and interact with the camera roll only if the patient adds a profile image to a profile. These statements are narrower than the earlier list, which also describes the apps asking for the device's video and audio for telehealth and letting patients choose an existing photo or video for a message.
Supporting quotations
Our mobile apps interact with your microphone only if you use your microphone to navigate our mobile apps.
Our mobile apps interact with your camera roll only if you add a profile image to a profile in our mobile apps.
our mobile apps will ask for permission to access your device's video and audio functionality to make the appointment possible
Qualifications & exceptions
Stated in the section for Android users.
The microphone statement is conditioned on the patient using the microphone to navigate the apps.
The camera roll statement is conditioned on adding a profile image to a profile.
The earlier list also describes access to the device's video and audio for telehealth appointments and choosing existing photos or videos for messages; these two sentences do not mention those uses.
Not stated here
The policy does not explain how these two narrow statements fit with telehealth audio and video access or with attaching existing photos or videos to messages.
Cross-references
contrast (model-proposed): Telehealth: the apps ask for video and audio access and do not record or store the visit — contrast: The Android disclosure says the apps interact with the microphone only if it is used to navigate the apps, while the telehealth item says the apps ask for access to the device's video and audio for appointments. The policy does not explain how the two fit together.
contrast (model-proposed): Photos or videos taken with the camera app for messages leave temporary copies in app-private storage — contrast: The Android disclosure says the apps interact with the camera roll only when a profile image is added, while the earlier list lets patients select an existing photo or video from the device for a message. The policy does not say whether selecting an existing item for a message counts as camera roll interaction.
Data Access & Collection · Company practice
Android disclosure: access, collection, use and sharing are as stated in the earlier list, with permission
Epic says the apps access, collect, use and share a patient's information, including video, audio, images, files and phone, as described in the earlier section on the limited ways the apps interact with information. Epic also says it prominently highlights these uses, describes the type of data being accessed, and obtains the patient's permission for these purposes as the apps are used.
Supporting quotations
Our mobile apps access, collect, use, and share your information (including video, audio, images, files, phone) as stated above in the section titled, “The Limited Ways Our Mobile Apps Interact With Your Information.”
We also prominently highlight these uses, describe the type of data being accessed, and obtain your permission for these purposes as you use our mobile apps.
The Limited Ways Our Mobile Apps Interact With Your Information
Qualifications & exceptions
Points back to the earlier list for what is accessed and why; it does not add new uses.
The listed data types are introduced by 'including'.
Permission is described as obtained as the patient uses the apps.
Not stated here
The data types named here do not include location or Bluetooth data, which the earlier list also covers; the word 'including' leaves the list open.
Epic collects limited non-identifying usage and device information for customer service and to understand app use
While a patient uses the mobile apps, Epic collects a short list of information it describes as non-identifying: the time the patient began using the app, the name of the healthcare organization they interacted with, any error messages or codes, the device model and operating system, and the app version. On Android devices it also collects the connection type, cellular or Wi-Fi, during errors. Epic says it collects this so it can provide customer service to the patient or their healthcare organization and understand how people use the apps.
Supporting quotations
Limited Information Collected from You or Your Device
Non-identifying Information Collected to Provide Customer Service and Support
While you use our mobile apps, we collect the following non-identifying information so we can provide customer service to you or your healthcare organization and understand how people use our mobile apps:
the time you began using the app
the name of the healthcare organization you interacted with
any error messages or codes
the model of device you used and its operating system
the version of our mobile app used
if you use Android devices, your connection type (cellular or Wi-Fi)during any errors
Qualifications & exceptions
'Non-identifying' is Epic's own label for this list.
The connection type is collected only on Android devices and only during errors.
The purposes are customer service to the patient or the healthcare organization, and understanding how people use the apps.
Not stated here
The passage does not say how long this information is kept, or who besides Epic and the healthcare organization receives it.
The passage does not say whether this information is linked to a patient's account.
Data Access & Collection · Company practice
Epic's servers automatically record IP address, language, date and time and device type
While a patient uses the mobile apps, Epic's servers automatically collect and record the patient's IP address, which the policy says may tell Epic generally where the patient is located, along with language preference, date and time, and the type of device or system used. These items are listed under the heading about keeping data and systems secure.
Supporting quotations
Information Used to Keep Data and Systems Secure
While you use our mobile apps, our servers automatically collect and record the following information:
Internet Protocol (IP) address (which may tell us generally where you are located)
Language preference
Date and time
Type of device or system you use
Qualifications & exceptions
The collection is automatic and happens while the patient uses the apps.
The IP address is described as possibly revealing general location.
This is a separate list from the customer-service information, though 'type of device or system' overlaps in kind with the device model and operating system listed there.
Not stated here
The passage does not say how long these records are kept.
Data Access & Collection · Company practice
If you contact Epic, it may keep a record of the communication; you choose what to share
If a patient contacts Epic through the methods listed on Epic's website, Epic may keep a record of the communication. The patient decides how much information to share in those cases.
Supporting quotations
Personal Information Collected From You (If You Contact Us)
we may keep a record of the communication
You can decide how much information you want to share with us in those cases
Qualifications & exceptions
Applies when the patient contacts Epic.
Keeping a record is stated as something Epic 'may' do.
How much the patient shares is the patient's choice.
Not stated here
The listed contact methods are on a linked web page that is not part of this document.
The passage does not say how long the record is kept.