Prevant Health Nursing Corporation
Effective Date: July 6, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
If you have questions about this Notice, contact our Privacy Officer at hello@prevanthealth.com or (888) 428-0000.
Who Follows This Notice
This Notice applies to Prevant Health Nursing Corporation, its providers, staff, and the companies we hire to help us serve you (our "business associates"), each of which is required by law and by contract to protect your Medical Information. In this Notice, "we," "our," and "us" mean Prevant Health Nursing Corporation. "You" means the patient the Medical Information is about, or that patient's personal representative.
What "Medical Information" Means
"Medical Information" (also called protected health information, or PHI) means the paper and electronic records we create, receive, or keep about your physical and mental health care — past, present, or future — that identify you. It includes information about scheduling, billing, and payment for your care. It does not include information that has been de-identified in accordance with federal privacy law.
Why We Keep Your Medical Information, and Our Duties
We keep your Medical Information to care for you and because the law requires us to. The law also requires us to:
- protect the privacy and security of your Medical Information;
- give you this Notice of our legal duties and privacy practices;
- follow the terms of the Notice currently in effect; and
- tell you if a breach occurs that may have compromised your Medical Information.
How We May Use and Share Your Medical Information
We use secure electronic health record and telehealth systems to manage your care, with safeguards that limit access to workforce members who need your information to do their jobs. The following describes the ways we may use and share Medical Information without your written authorization, with examples. Not every use or disclosure in a category is listed, but all of the ways we are permitted to use and share information fall within one of these categories.
For treatment
We may use and share your Medical Information to provide, coordinate, and manage your care. For example, we share your information with the laboratories that run your bloodwork and specialty testing, the pharmacies that fill your prescriptions, and the imaging centers, specialists, and other providers we refer you to or coordinate with. We may also review records from your prior providers to inform your care plan.
Through health information exchanges
Our electronic health record system may participate in secure health information exchange (HIE) networks that allow us and other treating providers to view relevant records — for example, your medication history or recent lab results from another provider — so your care is informed and safe. If you have questions about HIE participation or wish to ask about opting out, contact our Privacy Officer.
For payment
We may use and share your Medical Information to bill and collect payment for services. Because Prévant Health is a direct-pay practice, we do not bill health plans for your visits or membership. However:
- At your request, we will provide a superbill that you may submit to your health plan to seek out-of-network reimbursement. If you submit it, you are choosing to share your information with your plan.
- Standard labs and imaging ordered through outside partners may be billed to your health plan by those partners, which requires sharing the information needed for billing.
- We may share limited information with our payment processor to process your membership payments, and, if a bill is seriously overdue, with a collection agency as permitted by law.
For health care operations
We may use and share your Medical Information to run our practice and make sure our care is high quality — for example: quality assessment and improvement; reviewing outcomes and refining clinical protocols; training; licensing, credentialing, certification, and accreditation; legal and compliance functions; business planning; audits; developing, maintaining, and securing our electronic systems; and answering your questions or complaints. Where practical, we remove information that identifies you.
To contact you about appointments, care, and services
We may use your Medical Information to contact you by mail, phone, secure portal or app message, text, or email to: remind you of appointments; deliver test results; follow up on your care; ask about billing or payment; ask how well we cared for you; and tell you about treatment options or health-related products and services that may benefit you (such as programs, testing, or services we offer). We may leave voice messages at the number you provide.
About unsecure email and text. If you choose to communicate with us by standard email or text message, we may respond the same way. These channels are not encrypted end-to-end, and there are risks: messages can be intercepted, misdirected, forwarded, or stored on unsecured devices. By contacting us through unsecure channels, you accept these risks. We encourage you to use the secure patient portal or mobile app instead — and never use email or text in a medical emergency. Call 911.
With business associates
We may share your Medical Information with companies that perform services for us — such as our electronic health record, telehealth, scheduling, secure messaging, cloud hosting, and payment vendors — under written agreements that require them to safeguard your information as HIPAA requires.
With family, friends, and others involved in your care
We may share relevant Medical Information with a family member, friend, or other person you identify as involved in your care or payment for your care. When possible, we will ask you first, or give you the chance to object. If you are unable to tell us (for example, in an emergency), we will use professional judgment and share only what the person needs to know. For household memberships, each member's record is separate: we do not share one adult member's Medical Information with another adult in the household without permission.
To create de-identified information and limited data sets
We may use your Medical Information to create de-identified information (which no longer identifies you) or a limited data set (with most identifiers removed) as federal law allows. Limited data sets are used or shared only for research, public health, or health care operations, under an agreement requiring the recipient to protect the information.
As required or permitted by law
We may use or share your Medical Information:
- When required by law, including federal, state, and local reporting requirements;
- For public health activities — preventing or controlling disease; reporting births, deaths, and adverse drug or device events; product recalls; and notifying people who may have been exposed to a communicable disease;
- To report suspected abuse, neglect, or domestic violence involving children, elders, or dependent adults, as the law requires or permits;
- For health oversight activities — audits, investigations, inspections, and licensing by agencies that oversee health care;
- For judicial and administrative proceedings — in response to a court or administrative order, or in response to a subpoena, discovery request, or other lawful process when legal requirements are satisfied;
- To law enforcement, in limited circumstances as the law allows or requires — for example, in response to a warrant or court order, to identify or locate certain individuals, about the victim of a crime in limited situations, or to report a death we believe may have resulted from criminal conduct;
- To coroners, medical examiners, and funeral directors so they can carry out their duties;
- For organ, eye, or tissue donation, with organizations that handle procurement or transplantation;
- To avert a serious threat to the health or safety of you, another person, or the public;
- For specialized government functions — military command authorities for service members, and authorized federal officials for national security and protective services;
- To a correctional institution if you are in custody, as the law allows; and
- For workers' compensation and similar programs that provide benefits for work-related injuries or illness.
Research. We do not currently use or share your Medical Information for research. If that changes, we will do so only as federal and state law allow — in most cases, only with your written authorization or under a formally approved research protocol.
Fundraising and directories. We do not use your Medical Information for fundraising. Because we are a fully virtual practice, we do not maintain a facility directory.
Special Protections for Certain Information
Some information receives extra protection under federal or state law — including mental and behavioral health records, HIV/STI information, genetic information, and reproductive and sexual health information. Where the law of your state provides greater protection or requires your permission before we share this information, we follow that stricter law.
Genetic information. We use genetic test results (for example, APOE or nutrigenomic panels) only for your care, with your consent. We never sell genetic information and never share it with employers or insurers except as you direct or the law requires. The federal Genetic Information Nondiscrimination Act (GINA) and state genetic privacy laws provide additional protections.
Substance use disorder treatment records (42 CFR Part 2). If we create, receive, or maintain any records about you from a substance use disorder treatment program covered by 42 CFR Part 2 (a "Part 2 program"), those records receive privacy protections in addition to HIPAA. We may use or share Part 2 program records for treatment, payment, and health care operations only with your written consent as permitted by law, or when the law otherwise requires or permits (for example, a medical emergency or a specific court order). We may use or share Part 2 program records in a civil, criminal, administrative, or legislative proceeding against you only with your written consent or a court order or similar legal mandate compelling disclosure.
Uses and Disclosures That Require Your Written Authorization
We will not use or share your Medical Information for purposes not described in this Notice unless you give us written authorization. In particular, the following always require your written authorization:
- most uses and disclosures of psychotherapy notes (if any are created);
- uses and disclosures for marketing purposes; and
- any sale of your Medical Information — which, as a matter of practice, we do not and will not do.
You may revoke an authorization at any time by writing to us. Revocation stops future uses and disclosures but cannot undo sharing that already occurred with your permission.
Your Rights Regarding Your Medical Information
The records we create belong to Prévant Health, but the information in them belongs to you, and you have the following rights. To exercise any of them, contact our Privacy Officer (contact information at the end of this Notice); we may ask you to put your request in writing.
Right to see and get a copy of your record. You may inspect and receive a copy of your Medical Information, including billing records — in electronic form if you wish and it is readily producible that way. We will respond within 30 days (with one 30-day extension if needed, with notice to you) and may charge a reasonable, cost-based fee. In limited circumstances we may deny part of a request; if so, we will explain why in writing, and in some cases you may have the denial reviewed by a licensed health care professional we designate. You can also view much of your record anytime through the patient portal and mobile app.
Right to request a correction (amendment). If you believe information in your record is incorrect or incomplete, you may ask us in writing to amend it, telling us why. We will respond within 60 days (with one 30-day extension, with notice). We cannot erase what is already in the record, but we can add corrected or clarifying information. If we deny your request, we will tell you why in writing, and you may add a written statement of disagreement to your record, which we will include whenever we share the related information.
Right to an accounting of disclosures. You may request a list of certain disclosures of your Medical Information we made in the six years before your request. The list will not include disclosures made for treatment, payment, or health care operations; to you or with your authorization; or certain others the law excludes. The first list in any 12-month period is free; we may charge a reasonable, cost-based fee for additional lists in the same period, and we will tell you the cost before proceeding.
Right to request restrictions. You may ask us to limit how we use or share your Medical Information for treatment, payment, or operations, or what we share with someone involved in your care. We will consider every request, but we are not required to agree — except for one: if you pay in full out of pocket for an item or service and ask us not to share the related information with your health plan for payment or operations purposes, we must and will honor that request (unless the disclosure is required by law). Because our visits and membership are self-pay, we do not send visit information to your health plan unless you ask us to — for example, by requesting a superbill.
Right to confidential communications. You may ask us to contact you in a specific way or at a specific location — for example, only by portal message, or only at a particular phone number or address. You do not need to give a reason, and we will accommodate all reasonable requests.
Right to be notified of a breach. We will notify you as the law requires if a breach occurs that may have compromised the privacy or security of your Medical Information.
Right to a paper copy of this Notice. You may request a paper copy at any time, even if you agreed to receive it electronically. The current Notice is always available at prevanthealth.com/legal/notice-of-privacy-practices.
Right to choose someone to act for you. If someone is your legal guardian, holds a valid medical power of attorney, or is otherwise your personal representative under state law, that person may exercise your rights and make choices about your Medical Information. We will verify their authority before acting. For minor children enrolled in a household membership, a parent or legal guardian generally acts on the child's behalf, except where state law gives the minor the right to consent to and control the confidentiality of particular services — which we honor.
Changes to This Notice
We reserve the right to change this Notice at any time. Changes may apply to Medical Information we already hold as well as information we receive in the future. When we make a material change, we will post the revised Notice, with its new effective date, at prevanthealth.com/legal/notice-of-privacy-practices and in the patient portal, and provide it in accordance with law. The effective date appears at the top of this Notice.
Questions and Complaints
If you have questions about this Notice or our privacy practices, contact our Privacy Officer at hello@prevanthealth.com or (888) 428-0000.
If you believe your privacy rights have been violated, you may file a written complaint with us by mail:
Prevant Health Nursing Corporation
Attn: Privacy Officer
2506 Bransford Ave Ste 6
Nashville, TN 37204
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights: online at hhs.gov/ocr/complaints, by mail at 200 Independence Avenue SW, Washington, D.C. 20201, or by phone at 1-800-368-1019 (TDD: 1-800-537-7697).
We will never retaliate against you or treat you differently for filing a complaint.
Prevant Health Nursing Corporation · NPI 1245770791 · prevanthealth.com
Prévant Health does not provide emergency services. In an emergency, call 911 or go to the nearest emergency room.
This Notice is for your information. It does not replace the advice of your health care provider.
