Acceptable Use Policy
Effective Date:
Last Updated:
July 24, 2025
July 24, 2025
Applies To: All individuals granted access to the HealthHelper platform, including employees and affiliates of client organizations.
Purpose
This Acceptable Use Policy (“Policy”) outlines the responsibilities and permitted uses of the HealthHelper platform, which includes access to Protected Health Information (PHI) and tools for patient outreach, such as SMS messaging and phone calls. The purpose of this Policy is to protect patient privacy, maintain system integrity, and ensure compliant and appropriate use of HealthHelper services.
Authorized Use
Users are granted access to the HealthHelper platform solely to support authorized clinical, operational, and administrative activities related to patient care and practice performance. Access must be in alignment with HIPAA, applicable state privacy laws, and the policies of the user’s organization.
Responsibilities of Users
Users agree to:
Access only the data necessary to perform their job duties (“minimum necessary” standard).
Maintain the confidentiality and security of all PHI accessed through the platform.
Use secure passwords and never share login credentials.
Log out of the platform when not actively in use.
Promptly report any unauthorized access, suspected breaches, or security concerns to HealthHelper and their internal compliance contact.
Patient Engagement Tools
When using HealthHelper’s SMS and phone call features, users must:
Follow organization and regulatory guidelines for patient communication.
Use professional, respectful language in all communications.
Avoid sending sensitive or clinical details via SMS unless explicitly authorized.
Only contact patients for legitimate care-related purposes, such as scheduling, appointment reminders, or care gap closure.
Prohibited Activities
Users may not:
Access PHI not directly related to their job responsibilities.
Attempt to probe, scan, or test the vulnerability of the platform or its security features.
Introduce malicious software, spam, or misuse patient engagement features.
Use the platform for any non-healthcare, commercial, or personal purposes.
Share, download, or export patient data outside of the platform unless explicitly authorized and encrypted.
Monitoring and Enforcement
HealthHelper may monitor platform usage to ensure compliance with this Policy. Any violation may result in suspension or termination of access, notification to the user’s employer, and potential legal action, depending on the severity of the infraction.
By using the HealthHelper platform, users acknowledge and agree to comply with this Acceptable Use Policy.
