MedOpinion
HomeAboutServicesDoctorsContact

HIPAA Notice: This platform handles Protected Health Information (PHI). By using this service, you acknowledge our Privacy Policy and HIPAA Authorization. All data is encrypted in transit and at rest.

Privacy Policy

How MedOpinion collects, uses, and protects personal and healthcare-related information.

Last Updated: September 1, 2026

1. Introduction

MedOpinion is a cloud-based healthcare platform that connects patients with specialist doctors for services such as medical second opinions, appointment scheduling, and online video consultations. This Privacy Policy explains what information we collect through the platform, how we use it, and the choices available to you.

By creating an account or using the platform, you agree to the practices described in this policy.

2. Information We Collect

Depending on how you use the platform, we may collect:

  • Your name, email address, and (if provided) phone number
  • Account and login information, such as your password and role (patient, doctor, or administrator)
  • Appointment information, including dates, times, meeting type, and status
  • Medical information you voluntarily submit as part of a case, such as case descriptions, diagnoses, and urgency details
  • Medical documents you voluntarily upload, such as reports, images, or test results
  • Doctor profile information, such as name, specialty, qualifications, and hospital affiliation
  • Consultation information, including opinions, recommendations, and messages exchanged between patients and doctors
  • Video consultation metadata, such as room identifiers and join timestamps
  • Technical information, including your IP address, browser type, and device information
  • Cookies and similar storage used to keep you signed in and operate the platform

3. How We Use Information

We use the information we collect to:

  • Create and manage your account
  • Schedule, reschedule, and manage appointments
  • Connect patients with appropriate specialist doctors
  • Provide medical second opinions
  • Provide online video consultations
  • Send appointment notifications by email and SMS
  • Send service-related emails, such as welcome and account messages
  • Improve platform functionality and user experience
  • Maintain security and prevent fraud or abuse
  • Comply with legal and regulatory requirements

4. Healthcare Information

Patients may voluntarily submit healthcare and medical information — including case descriptions and medical documents — for the purpose of receiving healthcare-related services such as second opinions and consultations. This information is shared only with the doctor(s) assigned to the relevant case and is used to provide those services.

The platform is a communication and coordination tool. Content provided through the platform is prepared by the participating doctors, not by MedOpinion, and does not replace an in-person medical examination. If you are experiencing a medical emergency, contact your local emergency services immediately.

5. Sharing Information

We share information only in the following circumstances:

  • With the doctor(s) you consult with, so they can review your case and provide services
  • With patients, where appropriate, such as opinions, recommendations, and appointment details
  • With service providers that help us operate the platform, including hosting and cloud infrastructure providers
  • With our video consultation provider (Daily.co) to deliver video consultations
  • With email and SMS service providers (such as our transactional email provider and Twilio) to deliver appointment notifications
  • With legal or regulatory authorities, where disclosure is required by law

We do not sell your personal information, and we do not share it with advertisers.

6. Data Security

We apply reasonable technical and organizational safeguards to protect the information processed through the platform. These include encrypted connections (HTTPS/TLS), user authentication, role-based access controls, and audit logging of access to medical cases. Details of the technical controls we implement are described on our HIPAA Compliance page.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain information only as long as reasonably necessary for the purposes described in this policy, to comply with legal, regulatory, and healthcare record-keeping requirements, and for legitimate operational needs such as dispute resolution and security. When information is no longer required, we delete or de-identify it.

8. User Rights

Depending on your jurisdiction, you may have rights regarding your personal information, such as the right to access, correct, or request deletion of your information, or to object to certain processing. Applicable rights depend on the laws of your country or state.

To exercise any available right, contact us using the details in the Contact section below. We will respond in accordance with applicable law.

9. Cookies

The platform uses cookies and similar browser storage to keep you signed in, maintain your session, and operate core features such as authentication. These are functional cookies required for the platform to work; we do not use them for advertising or cross-site tracking.

10. Third-Party Services

MedOpinion relies on a small number of third-party services to operate:

  • Hosting and platform infrastructure providers that run the application and store data
  • Daily.co, which powers secure video consultations
  • Twilio, which delivers SMS appointment notifications
  • Transactional email providers, which deliver email notifications

These providers process information on our behalf to deliver the service. Their own privacy practices are governed by their respective privacy policies.

11. Children's Privacy

The platform is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. Where services are needed for a minor, the minor's parent or legal guardian should manage the account and submit information on the minor's behalf. If you believe a child under 16 has provided us with personal information, please contact us so we can remove it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the platform or applicable law. The "Last Updated" date at the top of this page indicates when the policy was last revised. Material changes will be communicated through the platform or by email where appropriate.

13. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

contact@med-opinion.net

MedOpinion

Trusted medical second opinions from world-class specialists. Get the clarity you need for important health decisions.

Quick Links

HomeAbout UsServicesOur DoctorsContact

Services

Medical Second Opinion

Remote Consultation

File Review

Specialist Matching

Contact

contact@med-opinion.net
+1 (800) 123-4567
123 Medical Center, New York, NY

© 2026 MedOpinion. All rights reserved.

Privacy PolicyTerms of ServiceHIPAA Compliance

Business Associate Agreement

HIPAA Business Associate Agreement (BAA)

This Business Associate Agreement ("BAA") is entered into between MedOpinion ("Business Associate") and you ("Covered Entity") pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the HITECH Act.

Permitted Uses: Business Associate may use and disclose PHI only as necessary to provide the services described in the underlying service agreement, or as required by law.

Safeguards: Business Associate agrees to implement appropriate administrative, physical, and technical safeguards to prevent unauthorized use or disclosure of PHI.

Breach Notification: Business Associate agrees to notify Covered Entity of any breach of unsecured PHI within 60 days of discovery.

Data Retention: Upon termination, Business Associate agrees to destroy or return all PHI received from Covered Entity.

Audit Rights: Covered Entity has the right to audit Business Associate's compliance with the terms of this BAA upon reasonable notice.