CareSwaps, LLC d/b/a PatientSwaps ("Company," "we," "us," or "our") operates as a HIPAA Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), as amended by the HITECH Act and the regulations at 45 C.F.R. Parts 160 and 164.
PatientSwaps is not a Covered Entity. We do not deliver healthcare, we do not maintain patient medical records as a healthcare provider, and we do not make clinical decisions. We provide algorithmic bed-matching and transfer-matching software to senior care facilities.
When PatientSwaps performs services on behalf of a healthcare facility (a Covered Entity under HIPAA), and those services involve Protected Health Information (PHI), PatientSwaps acts as that facility's Business Associate. The handling of PHI between the facility and PatientSwaps is governed by a written Business Associate Agreement (BAA) executed between the facility and PatientSwaps before any PHI is exchanged.
PatientSwaps uses PHI only to provide the matching and transfer services authorized by the facility. PHI is:
PatientSwaps does not use PHI for marketing, research, advertising, or any purpose outside the services authorized by the facility.
Under HIPAA, individuals have rights with respect to their PHI, including the right to access, amend, request an accounting of disclosures, and request restrictions. These rights are exercised through the healthcare facility that holds the patient relationship — the Covered Entity. PatientSwaps, as a Business Associate, does not respond directly to individual HIPAA rights requests. If you are a patient or authorized representative and wish to exercise an individual HIPAA right, please contact the facility's privacy officer or medical records department.
For questions about how PatientSwaps operates as a Business Associate, our security practices, or our BAA terms with facilities, contact hello@patientswaps.com.
For questions about how your information is handled on patientswaps.com itself (cookies, account data, marketing communications), see our Privacy Policy.
If you believe your HIPAA rights have been violated, you may file a complaint with the HHS Office for Civil Rights at ocrmail@hhs.gov or 1-800-368-1019.