Draft for legal review. This document is placeholder language written for design purposes and has not been approved by Bamboo Health's legal, privacy or compliance teams.
The short version
- We collect what we need to support your care, and no more.
- We share updates with your primary care provider, and required information with the Centers for Medicare & Medicaid Services (CMS).
- We never sell your information, and we do not use it for advertising.
- You can ask to see your information, correct it, or leave the program at any time.
What we collect
- Who you are: name, date of birth, address, phone number, email address and Medicare identifier.
- Your health: conditions, medicines, allergies, lab results relevant to the program (including kidney function, hemoglobin A1c and cholesterol), and behavioral health screening answers.
- Readings from devices: blood pressure and weight measurements sent by the devices we provide.
- Your answers and our notes: what you tell us during check-ins and in replies to our messages, and the care notes our team writes.
- Program use: when we contacted you, how you prefer to be reached, and basic website usage needed to keep this site working and secure.
Why we use it
To provide care coordination, care management and care navigation; to spot problems early and reach out; to connect you with clinical care, behavioral health services or crisis support when needed; to keep your primary care provider informed; to measure whether the program is working; and to meet the reporting requirements of the CMS Innovation Center ACCESS model.
Who we share it with
- Your primary care provider and other treating clinicians involved in your care.
- CMS and its evaluation contractors, as the ACCESS model requires.
- Service providers who work on our behalf under written agreements — for example device suppliers, secure messaging services and laboratories — and only for program purposes.
- Family members or caregivers you have authorized in writing.
- Others when the law requires it, or to prevent a serious and immediate threat to health or safety.
We do not sell your information, and we do not share it with advertisers or data brokers.
How we protect it
Your information is encrypted in transit and at rest, access is limited to staff who need it for your care, and our systems are monitored and audited. Bamboo Health handles protected health information consistent with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state law.
How long we keep it
We keep your program records for as long as the ACCESS model and applicable law require, then dispose of them securely. Leaving the program does not automatically delete records we are required to retain.
Your rights
- Ask for a copy of the information we hold about you.
- Ask us to correct something that is wrong.
- Ask us to limit certain uses or sharing, or to contact you a specific way.
- Withdraw an authorization you previously gave, including for a caregiver.
- Ask for a list of certain disclosures we have made.
- Disenroll from the program at any time.
- File a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate.
Text messages and this website
Text messaging is convenient but not a secure channel, so we keep clinical detail in messages to a minimum. Reply STOP at any time to stop messages. This website uses only the cookies needed to function and to keep it secure.
Contact us
Call 1-855-000-0000 (TTY 711), email access@bamboohealth.com, or write to the Bamboo Access Program, [Street address placeholder], [City, State ZIP placeholder]. Free language assistance and alternate formats, including large print and audio, are available at no cost. Contact details on this page are placeholders pending final setup.
Back to Bamboo Access