Our Privacy Terms and Policies
Privacy Notice
How we collect and use personal information
Terms of Use
Rules for using this website
IMG Notice of Privacy Practices
How Interwell Medical Group protects patient health information
Acumen Third Party Terms
Terms governing third-party services
Acumen Rules of the Road
Standards for use of Acumen® services
EPIC Pass-through Terms
Epic® platform terms that apply
Patient Rights and Responsibilities
IMG patient rights and care expectations
SMS Policy
Text messaging terms and consent
CPRA Form
Submit a California privacy request
FAQ
What does the Privacy Notice cover?
Our Website Privacy Notice covers how we (“Interwell Health,” “Acumen,” “Interwell Medical Group,” “we,” or “us”) may collect information about you through interactions with our website and mobile applications that contain a link to this Notice.
If IMG patient information is collected, please refer to our Notice of Privacy Practices for more information.
Who may use our services?
Our websites and mobile applications are designed for a general audience and not directed to children under the age of 13. We do not knowingly collect personal information online from any person under the age of 13.
What information do you collect?
We collect information necessary to operate our services, meet legal obligations, and support care coordination, including information you provide and information you agree to be collected through our website.
In addition, if you sign up for and use our mobile applications, they may collect and use the following information:
- Your contact information, to create an account
- Your password
- Demographic information you provide as part of account creation
- Language preferences
- Your GPS location, to support searching for nearby providers and/or provide security authentication
- Bluetooth, camera, and audio, to enable communications between you and your provider
- Your calendar, to add appointments
- Your files and images, to support file sharing between you and your provider
- Device identifiers, to authenticate your device as part of our security program
We may collect this information when you interact with us via this website, or through conversations with us via phone, email, or text. We may also collect information from your health plan as part of services it makes available to you.
We collect information you choose to provide (for example, when you fill out forms, request information, contact us, or sign up for communications). We also may collect certain information automatically when you use our website of services, such as device identifiers, IP address, browser type, pages viewed, and interactions with our site.
If you interact with IMG as a patient (or potential patient), IMG may collect health and related information needed to provide care and operate in compliance with HIPAA and other applicable laws. See IMG’s Notice of Privacy Practices for more information.
How do you use my personal information?
We use personal information to operate and improve our website and services, communicate with you, respond to requests, provide support, and maintain security and integrity. We may also use information for analytics and to understand how our website is used.
When we are acting in capacity as a HIPAA business associate, and where IMG is acting as a healthcare provider, we may use information to provide treatment, conduct healthcare operations, and handle billing and administrative functions consistent with HIPAA and other applicable laws.
Do you share personal information with third parties?
We may share personal information with vendors and service providers that help us run our business (for example, hosting, analytics, customer support tools, communication platforms, and security providers). We may also share information when required by law, to protect rights and safety, or in connection with a corporate transaction such as a merger or acquisition. For IMG and patient information, disclosures are made as permitted or required under HIPAA (for example, for treatment, payment, and healthcare operations, and other legally permitted disclosures).
What cookies and tracking technologies do you use?
Like most websites, we may use cookies, pixels, SDKs, or other similar technologies to help our website function, remember preferences, understand web traffic, and improve performance. Some of these technologies are essential, while others may be used for analytics or advertising depending on your choices and settings.
When required, we provide a way to manage preferences (for example, through a cookie banner or settings tool). You can also manage cookie preferences through your browser, though some site features may not function properly if certain cookies are disabled.
You can choose whether to allow optional cookies through our cookie banner when you visit the site. Necessary cookies are always enabled to ensure the site functions properly. Marketing and analytical cookies do not load unless you choose to enable them through our cookie preference banner. You can change your preference at any time.
Do you sell or share personal information for advertising?
We do not sell personal information in exchange for money. If you choose to enable marketing cookies, certain information about your website interactions may be shared with advertising or analytics partners for permitted purposes, which may be considered “sharing” under some state privacy laws. You can control these activities through your cookie preferences and available privacy rights.
How do you protect personal information?
We use a combination of administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure. These measures may include access controls, encryption where appropriate, monitoring, and vendor risk management.
No security measure is perfect, and we cannot guarantee absolute security. We encourage you to use strong passwords where applicable and to be cautious about sharing sensitive information through unsecured channels.
If I’m a patient, what privacy rights do I have under HIPAA?
HIPAA provides patients with important rights regarding their personal health information, such as the right to access records, request amendments in certain circumstances, and request restrictions or confidential communications in limited cases. Please refer to your applicable Notice of Privacy Practices for more information.
How do text messages work, and what will you send?
If you opt in to receive text messages, we may send messages related to your relationship to us (such as service updates, scheduling or care coordination communications, and other permitted operational messages). The types of messages, frequency, and any applicable terms are described in our SMS Policy.
We may send messages to individuals associated with Interwell through their health plans to support value-based care management services, such as care coordination, program engagement, or service-related communications.
IMG may also use text messaging for patient-related communications consistent with healthcare operations and applicable law.
All text messages are intended to support healthcare services, care coordination, and program engagement rather than commercial marketing. Where required, we obtain consent and provide clear opt-out options.
Message and data rates may apply based on your mobile plan. Your consent preferences may be changed at any time.
How do I opt out of text messages?
You may opt out at any time by replying “STOP” to a text message (if supported by that program) or by following the opt-out instructions in our SMS Policy. After you opt out, you may receive a final confirmation message, and then you will receive no further texts for that program unless you opt back in.
Opting out of one program may not automatically opt you out of all programs.
What rights do I have under California privacy law (CPRA)?
California residents may have rights to request access to certain personal information, including deletion and correction, and to opt out of certain uses (such as “sharing” for cross-context behavioral advertising), subject to legal exceptions.
We may need to verify your identity before processing a request. We will respond within timeframes required by law and explain if an exception applies.
How do I submit a CPRA request?
California residents may submit a request through our CPRA Request form. You may also call our privacy toll-free line at 1-877-849-8413.
We will review the request, verify identity as required, and respond in accordance with applicable law. If you use an authorized agent, we may require proof of authorization and may also require you to verify your identity directly.
How can I contact you about privacy?
For privacy questions or concerns, please use the contact information listed in the relevant document (for example, our Privacy Notice or IMG’s Notice of Privacy Practices). Contact routes may differ depending on whether your question relates to website interactions, Interwell services, or patient care.