We operate entirely within the privacy and security requirements set forth within HIPAA, including the encryption of all data in transit and at rest. Bamboo Health’s Pings is subjected to annual third-party audits of its security practices and architecture. We observe all local statutes with regards to handling sensitive data categories where required. Your health information can be shared with healthcare providers (skilled nursing facilities, home health agencies, hospitals, primary care providers, accountable care organizations, etc.) and health insurance organizations. Those entities can only access your information if they are covered entities, as defined by HIPAA (or, in certain circumstances, business associates providing services to covered entities) and solely if they have an active treatment or payment relationship with you. For your information to be shared, the entity must enter into an agreement with Bamboo Health and Pings, including a business associate agreement, which restricts their use of the information to treatment, payment, or healthcare operations purposes, as each is defined by HIPAA.