Consumer Health Data Privacy Policy
Effective Date: 12/01/2024
This Consumer Health Data Privacy Policy (“Policy”) applies only to residents of Connecticut, Nevada, and Washington to the extent such states' respective laws apply to Hundred Health / GHOAT LLC (“Hundred Health,” “we,” “our,” “us”) and the relevant consumer health data.
This Policy provides information about how Hundred Health collects, stores, and uses your Consumer Health Data arising out of and/or relating to your use of our Services - including your use of the website www.hundred.com (the “Site”) and any related technologies, features, mobile applications, and content. Without limitation, this Policy applies to residents of Connecticut, Nevada, or Washington about whom we collect “consumer health data” (“Consumer Health Data”) as defined by applicable laws such as the Connecticut Data Privacy Act (“CTDPA”), Nevada SB 370, and Washington's My Health, My Data Act (“MHMD”). We encourage you to review our Privacy Policy to learn more about Hundred Health's privacy practices. This Policy supplements our Privacy Policy in its entirety, and any capitalized terms in our Privacy Policy have the same meaning herein unless otherwise noted.
This Policy does not apply to third-party websites, applications, products, services, or other properties, even if they may link to our Site or our Site may link to them. We recommend reviewing the privacy practices of those third parties before connecting with and/or accessing third-party offerings and sharing any Personal Information.
Consumer Health Data We Collect
For purposes of this Policy:
“Personal Information” refers to information that identifies or is reasonably capable of being associated or linked, directly or indirectly, with an individual in Connecticut, Nevada, or Washington.
“Consumer Health Data” refers to Personal Information that is linked or reasonably linkable to an individual and that identifies their past, present, or future health status or mental health status.
Hundred Health may collect the following categories of Consumer Health Data about you:
Name and contact information
Demographic information
Account profile information
Individual health treatments, conditions, or diseases
Social, psychological, behavioral, or medical interventions
Health-related surgeries or procedures
Use or purchase of prescribed medication
Diagnosis or diagnostic testing, treatment, or medication
Gender affirming care information
Reproductive or sexual health information
Genetic data
Bodily functions
Vital signs, symptoms, or measurements of the above categories
Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies
Data that identifies you seeking health care services
Device information (e.g., IP address, device identifiers, mobile app identifiers, device operating system information)
Any information that we or our service providers process to associate or identify you with the above information derived from non-health information (e.g., inferred data).
We may also create aggregated, de-identified, or anonymized information from Consumer Health Data by removing components (e.g., name, email address, or linkable tracking ID) that make the data identifiable or through aggregation, obfuscation, or other methods. Subject to applicable law, our use of aggregated, de-identified, or anonymized information is not considered Personal Information.
Categories of Sources of Consumer Health Data
We may collect Consumer Health Data from the following sources:
Directly from you: Through interactions with us, including when you create an account, complete forms, upload medical records, or link wearable/IoT devices.
From third-party providers: Lab and healthcare service providers, with your permission and as required by law.
Through linked wearable devices: Including Terra-enabled wearables and any historical data from these devices.
From automatic tracking technologies: E.g., cookies used for analytics or service improvements.
From our creation or inference of information about you: Such as insights derived from health trends.
How We Use Consumer Health Data
We use Consumer Health Data to:
Provide customer service and maintain our Services.
Improve, develop, and research products.
Perform internal business functions, including administration.
Offer personalized recommendations via wearable integrations (e.g., Terra).
Share limited data with Lab and Provider Partners under strict privacy conditions.
To Whom We Disclose Consumer Health Data
We may share Consumer Health Data under the following circumstances:
With your consent: For example, sharing Lab Results with a designated healthcare provider.
As required by law: Such as responses to valid requests from public authorities.
As required by law: Such as responses to valid requests from public authorities.
In a corporate transaction: Including mergers or acquisitions.
To prevent harm: Such as addressing health or safety threats.
Consumer Health Data Privacy Rights
Your Rights as a Resident of Nevada, Washington, or Connecticut
Nevada and Washington residents:
Right to know what Consumer Health Data we collect, share, or sell.
Right to withdraw consent for future collection or sharing.
Right to request deletion of collected Consumer Health Data.
Right to non-discrimination for exercising these rights
Connecticut residents:
Right to know and access collected Consumer Health Data.
Right to request deletion of Consumer Health Data.
Right to correct inaccurate Consumer Health Data.
Right to opt out of targeted advertising and data sharing for profiling purposes.
Exercising Your Rights
To exercise your rights, please contact us at legal@hundred.com.
Requests are subject to identity and residency verification. We will confirm receipt within 10 business days and respond within 45 days. Extensions of up to 45 additional days may apply, with notice provided.
Changes to This Policy
We may update this Policy periodically. Changes take effect upon posting. We encourage regular review to stay informed.
Contact Us
If you have questions or feedback about this Policy, contact us at:
Email: legal@hundred.com
Mail: 825 K Street, Fl. 2, Sacramento, CA, 95814