Privacy & HIPAA
How Limitless Alt Med and The Doc Connect handle your health information.
Where your information lives
Your medical chart (your profile, medications, messages with your care team, appointments, documents and billing) lives in your practice's electronic health record system and is shown to you live in this portal. The Doc Connect stores only the minimum needed to run your account: your name and contact details, your appointment bookings, prescription status records, and a log of account activity.
How it is protected
- Everything is encrypted in transit and at rest, on HIPAA-eligible infrastructure covered by Business Associate Agreements.
- Free-text health descriptions you share are additionally encrypted at the field level.
- Access is limited to your own care team, and every access-relevant action is recorded in an audit log.
- Card payments are processed by Stripe. Your card number never touches our servers.
- We use no advertising trackers or third-party analytics on the portal.
Your rights
Under HIPAA you have the right to:
- Access a copy of the records we hold about you. Use the "Download my data" button on the Information tab of your portal, any time.
- Amend information that is inaccurate. Update most details yourself on the Information tab, or message your care team.
- Revoke consent and request deletion of the records Doc Connect stores. Contact Limitless Alt Med and they will action it.
- An accounting of disclosures of your information, on request.
Consent
When you created your portal account you agreed to Limitless Alt Med and The Doc Connect storing and using your information to provide your care. That consent is versioned and recorded with a timestamp. You can withdraw it at any time by contacting Limitless Alt Med; withdrawing consent may mean the portal can no longer be offered to you.
Questions
Privacy questions or requests go to Limitless Alt Med directly. They are your care provider and the controller of your treatment relationship; The Doc Connect operates the technology on HIPAA-compliant infrastructure on their behalf.