Legal & Compliance

Privacy Policy

Effective Date: July 15, 2026 · Last Updated: July 15, 2026

SMS & Text Messaging — Important Notice

PerMed Health does not sell, share, rent, or disclose mobile opt-in data or SMS consent information to any third party for marketing or promotional purposes. Your mobile number and text messaging consent are used solely to deliver communications directly related to your PerMed Health membership and care. This policy complies with TCPA, CTIA guidelines, and carrier requirements.

01

Overview

PerMed Health ("PerMed," "we," "us," or "our") is committed to protecting the privacy and confidentiality of every individual who interacts with our platform, website, and membership services, including the PerMed Care mobile application. This Privacy Policy explains how we collect, use, store, and protect your personal information — including health data synced through Apple Health (HealthKit) and connected devices, and any information provided in connection with SMS/text message communications.

By accessing our website at www.permed-health.com, using the PerMed Care app, submitting any inquiry form, or opting in to receive text messages from PerMed Health, you acknowledge the practices described in this Policy.

02

Information We Collect

We collect only the information necessary to deliver and improve our services. This may include:

  • Name, email address, and mobile phone number when submitted through our contact or intake forms
  • Health and medical information you voluntarily provide during onboarding or consultations
  • Health, fitness, and biometric data synced from Apple Health (HealthKit) and connected devices such as WHOOP and Withings — including recovery, sleep, heart rate, activity, and glucose data (via Abbott Lingo CGM through Apple Health)
  • Device and usage data when you visit our website or use our app (browser type, device type, IP address, pages or screens visited)
  • Account identifiers, such as your PerMed user ID, membership status, and connected-device account identifiers where needed to operate the Services
  • Payment and billing information processed by our payment provider; PerMed does not store full credit card numbers
  • Limited diagnostics, logs, and error information where collected to maintain app security, reliability, and performance
  • Communications you send us, including messages through SMS or email
  • Referral source information (member referral details)
App Privacy Data Categories

For App Store privacy disclosures, the data we collect may include Contact Info (such as name, email address, and phone number), Health & Fitness data (such as sleep, recovery, glucose, weight, body composition, heart rate, and activity data), Identifiers (such as user ID and connected-device identifiers), Usage Data and Diagnostics where collected, and Payment Information where applicable.

03

SMS / Text Messaging

PerMed Health may communicate with members and prospective members via SMS text messages for the following purposes:

  • Appointment reminders and scheduling confirmations
  • Member onboarding updates and intake coordination
  • Health alerts or time-sensitive care notifications
  • Administrative communications regarding your membership
Consent & Opt-In

By providing your mobile phone number and consenting to receive text messages, you agree to receive SMS communications from PerMed Health. Consent is not a condition of purchase or membership. Message frequency varies based on your membership status and care activity. Message and data rates may apply.

Opt-Out Instructions

You may opt out of receiving SMS messages at any time by replying STOP to any message we send. After opting out, you will receive a single confirmation message and no further texts. To re-subscribe, reply START. For help, reply HELP to any message or contact us at admin@permed-health.com.

Third-Party Data Sharing — SMS

PerMed Health will not share, sell, rent, lease, or otherwise disclose your mobile phone number or SMS opt-in consent data to any third party for any marketing or promotional purpose. Mobile opt-in information is treated as strictly confidential and is used exclusively to facilitate direct communications between PerMed Health and you.

04

HealthKit & Connected Device Data Apple Compliance

The PerMed Care app connects to Apple Health (HealthKit) and third-party devices, including WHOOP and Withings, to build your health dashboard. This may include recovery, sleep, heart rate, activity, and glucose data.

  • We do not use or disclose HealthKit or other health, fitness, or medical data for advertising, marketing, or any use-based data mining purpose. This data is used solely to populate your dashboard, inform your personalized health roadmap, and support your dedicated physician's care of you.
  • We do not sell, rent, or share HealthKit or connected-device data with third-party marketers or data brokers, under any circumstances.
  • Health data synced through the app is stored securely and is not stored in iCloud by PerMed Health.
  • Data may be shared only with the specialists or providers directly involved in your care, with your knowledge and consent, or as otherwise described in Section 06.
  • You control this access at all times. You can review or revoke the app's access to your health data via iPhone Settings → Health → Data Access & Devices, or by disconnecting WHOOP, Withings, or other connected accounts directly within the PerMed Care app under Settings. Disconnecting a device or revoking Apple Health access withdraws your authorization for future data syncing from that source.
Calculated Health Metrics

Certain metrics shown in the PerMed Care app, such as estimated A1c, glucose averages, time in range, recovery trends, and other summaries, may be calculated from Apple Health or connected-device data. These metrics are estimates for wellness, preventive care support, and physician review. They are not diagnostic measurements and should not be used on their own to diagnose, treat, or make medical decisions.

05

How We Use Your Information

Information you provide is used solely for purposes directly related to your membership and our services:

  • To respond to inquiries and coordinate your onboarding
  • To provide and personalize your health membership services, including your PerMed Care dashboard
  • To send appointment, care, and administrative communications (including via SMS)
  • To support physician review, care planning, and AI-assisted research summaries related to your membership
  • To improve the quality and security of our platform
  • To comply with applicable legal and regulatory obligations
  • To protect the safety and interests of our members and staff

We do not use your personal information — including health data — for advertising, profiling for third-party purposes, or any activity unrelated to your direct care and membership.

AI-Assisted Features

PerMed may use AI-assisted tools to help summarize research, organize information, and support clinician review. We do not share personal health information with third-party AI services unless disclosed to you and permitted by applicable law. AI-assisted outputs are informational and are reviewed or applied only as part of the Services; they do not replace the clinical judgment of your dedicated physician.

06

Information Sharing & Disclosure

PerMed Health does not sell, rent, trade, or share your personal information with third parties for commercial or marketing purposes — ever.

We may share your information only in the following limited circumstances:

  • Service providers — Vendors who support our operations, such as cloud hosting and storage providers, secure database providers, authentication and security tools, payment processors such as Stripe, email providers such as Resend, and EMR or encrypted communication systems, under confidentiality and data protection obligations
  • Connected device and platform providers — Third-party services you choose to connect, such as Apple Health/HealthKit, WHOOP, and Withings, subject to your authorization and their own privacy practices
  • Healthcare coordination — Specialists or providers involved in your direct care, with your knowledge and consent
  • Legal requirements — When required by law, court order, or to protect the rights and safety of PerMed or its members
  • Business transfers — In the event of a merger or acquisition, subject to equivalent privacy protections

Under no circumstances do we share your mobile opt-in data, SMS consent, contact information, or HealthKit/connected device data with third-party marketers, aggregators, or data brokers.

07

Data Security

PerMed Health maintains administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include end-to-end encryption, access controls, and regular security assessments.

While no system can guarantee absolute security, we are committed to applying industry-leading protections appropriate to the sensitivity of the health information we hold.

08

Data Retention

We retain account, membership, health, connected-device, and communication data for as long as your membership is active and as needed to provide the Services. After your membership ends, we retain personal information only for as long as required or permitted for legal, regulatory, medical recordkeeping, security, billing, dispute resolution, audit, or legitimate business purposes.

When data is no longer needed for these purposes, we delete, de-identify, or aggregate it in accordance with our retention practices and applicable law.

09

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal information, subject to legal retention obligations
  • Withdraw consent for SMS communications at any time (see Section 03)
  • Revoke HealthKit or connected device access at any time (see Section 04)
  • Lodge a complaint with a relevant data protection authority

To exercise any of these rights, please contact us using the information in Section 13.

10

Account Deletion Apple Compliance

You can request deletion of your PerMed account and associated data at any time. To do so, open the PerMed Care app and go to Settings → Delete Account to submit a deletion request, or email admin@permed-health.com with your request.

After we receive your deletion request, we may verify your identity and membership status before processing it. Once verified, we will delete your account and associated personal data within 30 days, except where we are required or permitted to retain certain records for legal, regulatory, medical recordkeeping, security, or legitimate business purposes.

11

Children & Health Research

The Services are intended for adults and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a minor without appropriate authorization, we will take reasonable steps to delete it or handle it as required by applicable law.

The Services are not intended to conduct human subjects research unless separately disclosed to you with appropriate consent, confidentiality information, withdrawal procedures, and any required independent ethics review or regulatory approvals.

12

Cookies & Website Analytics

Our website may use cookies and similar technologies to understand how visitors interact with our pages and to improve your browsing experience. We do not use advertising cookies or allow third-party ad networks to track visitors through our site.

You may adjust your browser settings to refuse cookies; however, some site features may not function as intended without them.

13

Contact Us

For questions about this Privacy Policy, to exercise your data rights, or for assistance with SMS opt-out, please reach out to our Privacy team:

14

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our services after any update constitutes your acceptance of the revised policy.

We encourage you to review this page regularly to stay informed about how we protect your information.