HIPAA Notice of Privacy Practices

Effective Date: February 19, 2026  ·  Last Updated: February 19, 2026

This Notice describes how medical information about you may be used and disclosed and how you can access this information. Please review carefully. Sphosh Health complies with the Health Insurance Portability and Accountability Act (HIPAA).

1. Our Legal Duty

We are required by law to maintain the privacy of your Protected Health Information (PHI), provide you with this Notice, and follow the terms of this Notice. Protected Health Information includes information related to:

• Mental health
• Medical conditions
• Treatment plans
• Payment records
• Identifying information

2. How We May Use & Disclose Your Information

A. Treatment

We may use your PHI to provide psychotherapy and medical services, coordinate care, and consult with other providers (when appropriate).

B. Payment

We may use PHI to bill insurance companies, verify coverage, and collect payment.

C. Healthcare Operations

We may use PHI for quality improvement, compliance review, staff training, and licensing requirements.

3. Uses Requiring Authorization

We will obtain written authorization before sharing psychotherapy notes (with limited legal exceptions), using information for marketing, or selling health information. You may revoke authorization in writing at any time.

4. Situations Where Disclosure May Be Required by Law

We may disclose PHI when required for:

• Public health reporting
• Court orders or legal proceedings
• Suspected abuse or neglect
• Law enforcement
• Serious threats to health or safety

5. Your Rights

You have the right to:

• Access your records — request copies of your medical records
• Request corrections — request amendments to inaccurate information
• Request restrictions — ask us to limit certain uses or disclosures
• Confidential communications — request communication through specific methods
• Receive an accounting of disclosures — request a list of certain disclosures made
• Receive a copy of this Notice — request a paper or digital copy at any time

6. Telehealth & Electronic Communication

When participating in telehealth, secure platforms are used, risks of electronic communication exist, and patients are responsible for maintaining privacy in their environment.

7. Data Security

We implement administrative, physical, and technical safeguards to protect PHI. However, no system is completely secure.

8. Complaints

If you believe your privacy rights have been violated, you may file a complaint with the Sphosh Health Privacy Officer, or with the U.S. Department of Health & Human Services, Office for Civil Rights (www.hhs.gov/ocr). You will not be retaliated against for filing a complaint.

9. Changes to This Notice

We reserve the right to change this Notice. Updated versions will be posted with a new effective date.

Contact Information

Sphosh Health
2135 112th Ave NE, Suite 201
Bellevue, WA 98004, USA

Phone: +1 (425) 278-6166
Email: info@sphoshhealth.com