Hundred Health's
Consumer Health Data Privacy Policy
Effective Date: 12/01/2024
This Consumer Health Data Privacy Policy (“Policy”) applies only to residents of Connecticut, Nevada, and Washington to the extent such states' respective laws apply to Hundred Health / GHOAT LLC (“Hundred Health,” “we,” “our,” “us”) and the relevant consumer health data.
This Policy provides information about how Hundred Health collects, stores, and uses your Consumer Health Data arising out of and/or relating to your use of our Services - including your use of the website www.hundred.com (the “Site”) and any related technologies, features, mobile applications, and content. Without limitation, this Policy applies to residents of Connecticut, Nevada, or Washington about whom we collect “consumer health data” (“Consumer Health Data”) as defined by applicable laws such as the Connecticut Data Privacy Act (“CTDPA”), Nevada SB 370, and Washington's My Health, My Data Act (“MHMD”). We encourage you to review our Privacy Policy to learn more about Hundred Health's privacy practices. This Policy supplements our Privacy Policy in its entirety, and any capitalized terms in our Privacy Policy have the same meaning herein unless otherwise noted.
This Policy does not apply to third-party websites, applications, products, services, or other properties, even if they may link to our Site or our Site may link to them. We recommend reviewing the privacy practices of those third parties before connecting with and/or accessing third-party offerings and sharing any Personal Information.
- Consumer Health Data We Collect
- For purposes of this Policy:
- “Personal Information” refers to information that identifies or is reasonably capable of being associated or linked, directly or indirectly, with an individual in Connecticut, Nevada, or Washington.
- “Consumer Health Data” refers to Personal Information that is linked or reasonably linkable to an individual and that identifies their past, present, or future health status or mental health status.
- Hundred Health may collect the following categories of Consumer Health Data about you:
- Name and contact information
- Demographic information
- Account profile information
- Individual health treatments, conditions, or diseases
- Social, psychological, behavioral, or medical interventions
- Health-related surgeries or procedures
- Use or purchase of prescribed medication
- Diagnosis or diagnostic testing, treatment, or medication
- Gender affirming care information
- Reproductive or sexual health information
- Genetic data
- Bodily functions
- Vital signs, symptoms, or measurements of the above categories
- Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies
- Data that identifies you seeking health care services
- Device information (e.g., IP address, device identifiers, mobile app identifiers, device operating system information)
- Any information that we or our service providers process to associate or identify you with the above information derived from non-health information (e.g., inferred data).
- We may also create aggregated, de-identified, or anonymized information from Consumer Health Data by removing components (e.g., name, email address, or linkable tracking ID) that make the data identifiable or through aggregation, obfuscation, or other methods. Subject to applicable law, our use of aggregated, de-identified, or anonymized information is not considered Personal Information.
- For purposes of this Policy:
- We may collect Consumer Health Data from the following sources:
- Directly from you: Through interactions with us, including when you create an account, complete forms, upload medical records, or link wearable/IoT devices.
- From third-party providers: Lab and healthcare service providers, with your permission and as required by law.
- Through linked wearable devices: Including Terra-enabled wearables and any historical data from these devices.
- From automatic tracking technologies: E.g., cookies used for analytics or service improvements.
- From our creation or inference of information about you: Such as insights derived from health trends.
- We use Consumer Health Data to:
- Provide customer service and maintain our Services.
- Improve, develop, and research products.
- Perform internal business functions, including administration.
- Offer personalized recommendations via wearable integrations (e.g., Terra).
- Share limited data with Lab and Provider Partners under strict privacy conditions.
- We may share Consumer Health Data under the following circumstances:
- With your consent: For example, sharing Lab Results with a designated healthcare provider.
- As required by law: Such as responses to valid requests from public authorities.
- As required by law: Such as responses to valid requests from public authorities.
- In a corporate transaction: Including mergers or acquisitions.
- To prevent harm: Such as addressing health or safety threats.
- Your Rights as a Resident of Nevada, Washington, or Connecticut
- Nevada and Washington residents:
- Right to know what Consumer Health Data we collect, share, or sell.
- Right to withdraw consent for future collection or sharing.
- Right to request deletion of collected Consumer Health Data.
- Right to non-discrimination for exercising these rights
- Connecticut residents:
- Right to know and access collected Consumer Health Data.
- Right to request deletion of Consumer Health Data.
- Right to correct inaccurate Consumer Health Data.
- Right to opt out of targeted advertising and data sharing for profiling purposes.
- Exercising Your Rights
- To exercise your rights, please contact us at legal@hundred.com.
- Requests are subject to identity and residency verification. We will confirm receipt within 10 business days and respond within 45 days. Extensions of up to 45 additional days may apply, with notice provided.
- Nevada and Washington residents:
- We may update this Policy periodically. Changes take effect upon posting. We encourage regular review to stay informed.
- If you have questions or feedback about this Policy, contact us at:
Email: legal@hundred.com
Mail: 825 K Street, Fl. 2, Sacramento, CA, 95814