Level Health (“Level Health,” “we,” “our,” or “us”) values your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices and rights available to you.
This policy applies to levelhealth.io and any digital services we operate. Protected Health Information (“PHI”) collected as part of clinical care is additionally governed by our Notice of Privacy Practices under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
1. Information We Collect
We collect the following categories of information:
Information You Provide
- Contact details — first name, last name, email address, phone number, and state of residence submitted through our consultation form.
- Health intake information — goals, symptoms, history, and any narrative you choose to share when requesting or receiving care.
- Payment information — billing details processed by our third-party invoicing provider (QuickBooks). Level Health does not store full payment card numbers on its own servers.
- Clinical information — once you become a member, your physician and care team collect laboratory results, examination notes, prescriptions, and related clinical data. This information is PHI and is governed by our HIPAA Notice of Privacy Practices.
Information Collected Automatically
- Device and usage data — IP address, browser type, operating system, pages visited, and timestamps, collected through standard server logs and limited analytics.
2. How We Use Your Information
We use your information to:
- Respond to Discovery Call requests and consultation inquiries, and schedule your appointments.
- Provide medical care, design and adjust your personalized, physician-directed protocol, and coordinate prescription fulfillment.
- Communicate with you about your care, appointments, billing, and changes to our services.
- Operate, secure, and improve our website and services.
- Comply with legal, regulatory, and professional obligations.
3. How We Share Your Information
We do not sell your personal information. We share information only as needed to operate Level Health and provide your care:
- Care delivery platforms — Spruce, our HIPAA-compliant telemedicine platform, supports our consultations, secure messaging, and documentation. Spruce acts as a Business Associate under HIPAA.
- Therapeutic fulfillment partners — for therapeutics clinically indicated by your physician, we coordinate fulfillment with partners that ship directly to you.
- Diagnostic labs — when your physician orders bloodwork, your information is shared with the testing laboratory solely to perform and return your results.
- Billing and accounting providers — QuickBooks for invoicing and payment processing.
- Service providers — vendors that help us run our website (hosting, form delivery, analytics) under contractual confidentiality and security obligations.
- Legal disclosures — when required by law, court order, or to protect the rights, safety, or property of Level Health or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice as required by law.
4. Cookies and Tracking
Our website uses a minimal set of cookies and similar technologies necessary to operate the site (e.g., session handling) and, where applicable, limited analytics to understand aggregate site usage. You can control cookies through your browser settings. We do not use cookies to deliver targeted advertising.
5. Data Security
We take administrative, technical, and physical safeguards to protect your information, including encryption in transit, restricted access controls, and Business Associate Agreements with our HIPAA-covered service providers. No transmission or storage system is perfectly secure; we cannot guarantee absolute security but work to maintain industry-standard protections.
6. Retention
We retain your information for as long as necessary to provide our services, comply with legal and recordkeeping obligations (including medical records retention requirements applicable in your state), resolve disputes, and enforce our agreements. PHI retention is governed by state and federal medical record retention laws.
7. Your Rights and Choices
Depending on your state of residence, you may have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion, subject to limitations imposed by medical recordkeeping laws.
- Opt out of certain processing activities or marketing communications.
To exercise any of these rights, please contact us at support@levelhealth.io. We may need to verify your identity before fulfilling your request. Specific rights regarding PHI are described in our HIPAA Notice of Privacy Practices.
8. Children's Privacy
Level Health's services are intended for adults 18 years of age and older. We do not knowingly collect personal information from minors. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.
9. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date at the top of this page and, where appropriate, notify you. Continued use of our services after updates take effect constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or your information, please reach out to us at support@levelhealth.io.
A note on jurisdiction: Level Health is a telemedicine practice licensed to provide care in New York, Pennsylvania, and New Jersey. Specific privacy protections and disclosure obligations may vary by state.