Privacy Policy

Effective Date: January 1, 2026

​

1. Introduction

GeneID Lab is committed to protecting the privacy and security of health and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard data in connection with our electronic health record (EHR) system and related services, including any data transmitted or stored outside the United States.

We comply with the U.S. Health Insurance Portability and Accountability Act (HIPAA) and other applicable data protection laws.

​

2. Information We Collect

• We may collect the following categories of information:

  • Protected Health Information (PHI): such as patient names, medical history, diagnoses, prescriptions, and treatment notes, as provided by healthcare providers using our system.

  • User Account Information: names, email addresses, professional credentials, and login details for providers and authorized staff.

  • Mobile Information: such as phone numbers provided for communication and messaging purposes.

  • Technical and Usage Data: such as IP address, browser type, device information, logs, and performance data for security and troubleshooting.

  • Information from Third-Party Integrations: when you connect our EHR system to external APIs (e.g., labs, pharmacies), we receive and process data as authorized.

​

3. How We Use Information

We use collected information to:

• Provide, maintain, and improve the EHR platform

• Support clinical workflows, data exchange, and patient care coordination

• Communicate with users, including via email and SMS when consent is provided

• Ensure data security, detect and prevent fraud or unauthorized access

• Comply with applicable laws, regulations, and contractual obligations

​

4. Information Sharing and Disclosure

We may share information in the following limited ways:

• With Authorized Healthcare Providers and Their Staff: to enable patient care and EHR functionality.

• With Third-Party Service Providers: who perform services on our behalf (e.g., hosting, secure messaging, analytics) under binding confidentiality agreements and in compliance with HIPAA Business Associate Agreements.

• For Legal or Regulatory Requirements: as required by law, such as reporting infectious diseases, complying with court orders, or responding to lawful requests.

• For International Transfers: if data is transmitted or stored in countries outside the United States, we implement appropriate safeguards (such as Standard Contractual Clauses or other lawful mechanisms) to ensure the same level of protection required under U.S. law.

We do not sell or rent personal, health, or mobile information, including SMS opt-in data.

​

5. Data Security

We implement administrative, technical, and physical safeguards in accordance with HIPAA and industry best practices to protect information against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

​

6. Data Retention

We retain information as long as necessary to provide our services, comply with legal and contractual obligations, and as required by applicable medical record retention laws.

​

7. Patients’ and Users’ Rights

Patients and authorized users may have the right to:

• Access, amend, or request a copy of their health information

• Request restrictions on certain uses or disclosures of their data

• Withdraw consent for communications where applicable

• File a complaint if they believe their privacy rights have been violated

​

Requests can be submitted to:

info@geneidlab.com

​

8. International Data Transfers

Because our services may involve data processing in or transfer to other countries, we maintain technical and contractual safeguards to ensure that the information remains protected under standards equivalent to U.S. privacy laws, including HIPAA.

​

9. Updates to This Policy

We may update this Privacy Policy as our practices, technologies, or legal requirements evolve. We will post the updated policy on our website with a revised “Effective Date.”

​

10. Mobile Information & SMS Communications

• We may collect your mobile phone number when you voluntarily provide it for communication purposes, including appointment reminders, service updates, and other relevant notifications.

• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

• We do not sell, rent, or share mobile phone numbers or SMS opt-in data with third parties or affiliates for marketing or promotional purposes.

• Message frequency may vary. Message and data rates may apply.

• You may opt out of SMS communications at any time by replying “STOP”. For assistance, reply “HELP” or contact us directly using the information provided above.

​

11. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact:

Cheryl Magna

GeneID Lab

136 Summit Ave

Montvale, NJ 07645

Email: info@geneidlab.com

Phone: 201-825-0186