Privacy Policy

This Privacy Policy explains how TNS Brokerage Services, LLC, doing business as VeriPath ("VeriPath," "we," "us," or "our"), collects, uses, shares, and protects information when you use the VeriPath website, mobile applications, and related healthcare navigation services (collectively, the "Services"). It works together with our Terms of Service and our HIPAA Notice of Privacy Practices. By using the Services, you agree to the practices described here.

1. Introduction and Scope

VeriPath is a healthcare navigation and price-transparency platform that provides information and software tools. We are not a healthcare provider, health plan, or insurer. This Policy applies to information we collect through the Services. It does not apply to the practices of providers, pharmacies, insurers, or other third parties whose information we surface or whom you choose to engage; their use of your information is governed by their own policies.

2. Information We Collect

We collect the following categories of information:

• Information you provide. Account details such as your name, email address, and password; profile and location information; and your communications with us.
• Health-related information. Information you choose to share so we can help you, such as medical bills, explanations of benefits, prescriptions, and the services, procedures, or providers you research. See Section 5 and our HIPAA Notice for how we handle this information.
• Payment information. Subscription and billing details. Card numbers are processed by our payment processors; VeriPath does not store full payment card numbers. [Confirm payment processor and data flow with counsel.]
• Usage and device information. How you interact with the Services, including pages viewed, searches run, features used, IP address, browser and device type, and similar technical data, collected through cookies and similar technologies (see Section 6).
• Information from third parties. Pricing and provider data from public, government, and licensed sources used to operate the Services, and information from service providers that support our operations.

3. How We Use Information

We use information to:

• Provide, operate, personalize, and improve the Services, including cost estimates, provider comparisons, the VeriPath Score, bill review, prescription sourcing, and assistance navigation;
• Create and manage your account and process your subscription and payments;
• Communicate with you about your account, respond to requests, and send service and, where permitted, marketing messages;
• Maintain the security, integrity, and reliability of the Services and prevent fraud and misuse;
• Analyze usage to understand and improve how the Services perform; and
• Comply with legal obligations and enforce our Terms of Service.

4. How We Share Information

We do not sell your personal information. We share information only as described here:

• With service providers. Vendors that perform functions on our behalf — such as hosting, payment processing, analytics, and customer support — under contracts that require them to protect your information and use it only to provide those services.
• At your direction. With providers, pharmacies, insurers, assistance programs, or others when you ask us to share on your behalf.
• For legal reasons. When required by law or legal process, or to protect the rights, safety, or property of members, the public, or VeriPath.
• In a business transfer. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred, subject to this Policy.
• With your consent. For any other purpose disclosed to you at the time we collect the information or for which you provide consent.

5. Health Information

We understand that health information is sensitive. Information such as your bills, explanations of benefits, and prescriptions is used to provide the Services you request and is handled in accordance with our HIPAA Notice of Privacy Practices and applicable law. We do not sell health information, and we do not use it for advertising. Please review our HIPAA Notice for additional detail about how this information is used and the rights you have regarding it.

6. Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies to operate the Services, remember your preferences, keep you signed in, measure performance, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the Services function. [List analytics and advertising technologies used, if any, and provide opt-out instructions — confirm with counsel.] We do not use health information for cross-context behavioral advertising.

7. Data Retention

We keep personal information for as long as needed to provide the Services, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it. [Confirm specific retention periods with counsel.]

8. How We Protect Information

We maintain administrative, technical, and physical safeguards designed to protect your information against unauthorized access, use, or disclosure, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to limit access to those who need it to provide the Services.

9. Your Choices and Rights

You can review and update your account information at any time, and you can:

• Request access to, correction of, or deletion of your personal information;
• Opt out of marketing emails using the unsubscribe link in those messages (we may still send service and transactional messages);
• Control cookies through your browser; and
• Close your account by contacting us.

To make a request, contact us using the information in Section 14. We may need to verify your identity, and some information may be retained as permitted or required by law.

10. State Privacy Rights

Depending on where you live, you may have additional rights under state privacy laws — such as the right to know what personal information we collect, to access or delete it, to correct it, to opt out of sale or sharing (we do not sell personal information), and not to be discriminated against for exercising your rights. To exercise any of these rights, contact us as described below. [Confirm applicable state-law disclosures, including California and other states, and any required metrics or authorized-agent process with counsel.]

11. Children's Privacy

The Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

12. Third-Party Links and Services

The Services may link to or reference third-party websites and services, including hospitals, pharmacies, and assistance programs. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy with a new effective date and, where appropriate, notify you through the Services or by email. Your continued use of the Services after the changes take effect constitutes your acceptance of the updated Policy.

14. Contact Us

If you have questions about this Privacy Policy or your information, contact:

VeriPath Privacy Team
TNS Brokerage Services, LLC
Hahira, GA 31632
memberservices@veripath.health