Hypertension RPM — Privacy Policy

Effective Date: July 29, 2026

Information We Collect

Personal Information

• Name — used to identify your account and personalize the experience.
• Email address — used for sign-in via one-time passcode and program communications.
• Phone number — used for care team follow-up and, if you choose it, sign-in via SMS one-time passcode.
• Address (optional) — used for shipping blood pressure cuffs and program logistics.
• Date of birth — used to confirm eligibility, support clinical risk stratification, and identify your record to your insurer.
• Gender, race, and ethnicity (optional) — used to support clinically validated treatment guidelines when provided.
• Height and weight (optional) — used to support clinical assessment when provided.

Health Information

• Blood pressure readings (systolic, diastolic, heart rate, timestamp, device ID, optional notes) — captured via Bluetooth from your blood pressure cuff or entered manually.
• Blood pressure category (Normal, Elevated, Stage 1, Stage 2, Crisis) — derived from your readings using American Heart Association guidelines.
• Clinical history — chronic conditions, high blood pressure status, blood pressure medications and missed doses, other medications, and smoking status.
• Lifestyle and well-being information (optional) — exercise frequency, food frequency, sleep quality, stress level, financial stress, and loneliness — collected via in-app surveys to support program coaching.
• Mental health screening — responses to a two-item depression screener (PHQ-2).
• Call notes and follow-up history — entered by your care team in connection with monitoring and follow-up care.
• Monitoring records — a record of the days on which qualifying device readings were transmitted, used as evidence supporting the remote monitoring service.

Insurance and Billing Information

Because remote patient monitoring is a reimbursable clinical service, the App collects billing information that the HTN Prevention Program app does not. We collect it only after you provide explicit, versioned, timestamped electronic consent within the App.

• Insurance details — primary and secondary insurance payer name, plan name, member ID, and group number.
• Clinical billing details — the qualifying diagnosis (ICD-10) code, your ordering provider, and the version, timestamp, and source of your billing consent.

No payment is collected in the App, and there are no in-app purchases. The App does not collect or store credit card, debit card, or bank account information.

Device and Technical Information

• Device or other identifiers — used for Bluetooth pairing with your blood pressure cuff, device authentication, and crash diagnostics.
• Push notification token, device platform, and device model — used to deliver care reminders and notifications and to support the App.
• Crash logs and diagnostics — captured automatically when the App encounters errors. Used to improve App reliability.
• App activity — basic usage signals (sign-ins, screens viewed) used to improve the App and surface re-engagement reminders.

What We Do Not Collect

The App does not collect your location, camera, microphone, contacts, photos, or advertising identifiers, and it does not use any advertising or cross-app tracking technology.

The App uses a Bluetooth Low Energy (BLE) connection only to receive readings from your blood pressure cuff. It does not use Bluetooth to determine your location. On Android 12 and later the App declares its Bluetooth scanning as never being used to derive location, and does not request location permission. On Android 11 and earlier the operating system itself requires a location permission before any app may scan for Bluetooth devices; even where the operating system requires that permission, we do not collect, transmit, or store your location.

How We Use Your Information

• To provide the App's core functionality, including blood pressure tracking, history, and personalized health insights.
• To enable secure sign-in via email or phone-based one-time passcode.
• To allow your care team and authorized program staff to monitor your blood pressure and follow up with you regarding elevated readings, missed readings, or program milestones.
• To deliver reminders and notifications related to your care.
• To pair the App with your blood pressure cuff over Bluetooth.
• To verify insurance eligibility and bill for the remote patient monitoring service under applicable Medicare and other payer rules.
• To maintain the records required to substantiate a billed monitoring service.
• To monitor App reliability through crash reporting and diagnostics.
• To comply with HIPAA, audit logging requirements, and other applicable laws.

How We Share Your Information

We do not sell your information. We do not share your information for advertising or marketing purposes. The App does not display third-party advertisements.

We share information only with the following categories of recipients, in support of the App's operation:

• Your care team — the clinicians and authorized program staff at Mount Sinai Heart delivering your hypertension program, under a HIPAA-covered treatment relationship.
• Convex — our backend database provider, which stores your account and reading data under a HIPAA Business Associate Agreement.
• Clerk — our authentication provider, which handles sign-in and identity management.
• Sentry — our crash reporting provider, which receives device identifiers, crash logs, and diagnostic information to help us identify and fix App issues. This data is associated with a one-way SHA-256 hash of your account identifier rather than your direct identity, and messages are filtered to remove health information before transmission. Sentry does not receive your blood pressure readings, insurance information, lifestyle data, or other health information.
• Your insurance payers — as necessary to verify coverage and bill for the remote patient monitoring service.
• Apple and Google — to the extent required for App Store and Google Play distribution and basic platform telemetry.

We may also disclose information when legally required (e.g., subpoena, court order) or to protect the safety of users.

Relationship to Mount Sinai Privacy Practices

This App is offered as part of a hypertension program affiliated with the Mount Sinai Health System. Mount Sinai's institutional privacy practices and Notice of Privacy Practices also apply to protected health information handled through the App and are available at mountsinai.org/privacy. Where those practices and this policy both apply, the Mount Sinai practices control for protected health information; this policy additionally describes the app-specific data handling — including technical, diagnostic, and billing data, and the third-party service providers listed above — that the app stores require us to disclose.

Data Security

• All data is encrypted in transit via HTTPS/TLS.
• Sensitive data stored locally on your device is encrypted using SQLCipher (AES).
• Authentication uses one-time passcodes; passwords are not stored on our servers.
• The App applies an inactivity lock to protected screens.
• Multi-factor authentication is required for all program staff accessing patient data.
• Access to Protected Health Information is logged and audited per HIPAA §164.312(b).

No method of transmission or storage is completely secure, but we maintain administrative, technical, and physical safeguards designed to protect your information consistent with our HIPAA obligations.

Data Retention

We retain your account and health information for the duration of your participation in the Hypertension RPM program plus six (6) years thereafter, in accordance with HIPAA record retention requirements. Audit logs are retained for the same period. Crash logs and diagnostics are retained for 90 days.

Records substantiating a billed monitoring service — including the record of qualifying device reading days and associated billing evidence — are retained as required by law and payer rules, and are not deleted on request while that retention obligation applies.

Your Rights and Choices

• Access — you may request a copy of your data by contacting us at the address below.
• Correction — you may correct or update your profile information directly in the App or by contacting us.
• Deletion — you may request deletion of your account and associated data by emailing support@htnprevention.org with the subject line "Account deletion request" from the email address associated with your account, or by contacting your care team. We will verify your identity and process the request. Some data may be retained as required by HIPAA, payer rules, or other law (e.g., audit logs and billing evidence, as described above).
• Opt out — address, gender, race, ethnicity, height, and weight are optional fields; you may decline to provide them.

Depending on where you live, you may have additional rights to access, correct, delete, or restrict the use of your information. We will not discriminate against you for exercising these rights. Because much of the information in the App is health information used to deliver care, some requests may be handled under HIPAA and our Notice of Privacy Practices rather than under general privacy law.

To exercise any of these rights, email us at support@htnprevention.org or contact your care team.

Children's Privacy

The App is intended for adults 18 years of age and older enrolled in a hypertension program. We do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page reflects the most recent version. Material changes will be communicated through the App or via email.