What you need to know when you download a linked App
Blue Cross and Blue Shield of North Carolina (Blue Cross NC) is required to provide you with access to detailed information about your health history through a “Patient Access API.” While you are a current member, you may access this information by downloading an Application (App) on your smart phone, tablet, computer or other similar device. The information available through the Patient Access API includes information we collect about you while you have been enrolled in certain lines of business since January 1, 2016. The information includes the following information for as long as we maintain it in our records:
- Claims and “encounter” data1 concerning your interactions with health care providers; and
- Clinical data that we collect in the process of providing case management, care coordination or other services to you.
The information we will disclose may include information about treatment for Substance Use Disorders, mental health treatment, HIV status, or other sensitive information.
Things you may wish to consider when selecting an App:
- Will this App sell my data for any reason?
- Will this App disclose my data to third parties for purposes such as research or advertising?
- How will this App use my data? For what purposes?
- Will the App allow me to limit how it uses, discloses, or sells my data?
- If I no longer want to use this App, or if I no longer want this App to have access to my health information, can I terminate the App’s access to my data? If so, how difficult will it be to terminate access?
- What is the App’s policy for deleting my data once I terminate access? Do I have to do more than just delete the App from my device?
- How will this App inform me of changes in its privacy practices?
- Will the App collect non-health data from my device, such as my location?
- What security measures does this App use to protect my data?
- What impact could sharing my data with this App have on others, such as my family members?
- Will the App permit me to access my data and correct inaccuracies? (Note that correcting inaccuracies in data collected by the App will not affect inaccuracies in the source of the data.)
- Does the App have a process for collecting and responding to user complaints?
Covered entities and HIPAA enforcement
The US Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) enforces the HIPAA Privacy, Security, and Breach Notification Rules. Blue Cross NC is subject to HIPAA as are most health care providers, such as hospitals, doctors, clinics, and dentists. You can find more information about your rights under HIPAA and who is obligated to comply with HIPAA on the HIPAA for Individuals .gov page. To learn more about filing a complaint with OCR related to HIPAA requirements, visit the Filing a HIPAA Complaint .gov page. You may also file a complaint with Blue Cross NC by calling the Customer Service phone number on the back of your Member ID card. You can find your card online through Blue Connect if your physical card is unavailable.
Apps and privacy enforcement
An App generally will not be subject to HIPAA. An App that publishes a privacy notice is required to comply with the terms of its notice, but generally is not subject to other privacy laws. The Federal Trade Commission Act protects against deceptive acts (such as an App that discloses personal data in violation of its privacy notice). An App that violates the terms of its privacy notice is subject to the jurisdiction of the Federal Trade Commission (FTC). The FTC provides information about mobile App privacy and security for consumers on the How To Protect Your Privacy on Apps .gov page.
If you believe an App inappropriately used, disclosed, or sold your information, you should contact the FTC. You may file a complaint with the FTC using the FTC complaint assistant at ReportFraud.ftc.gov.
To unlink or manage your App connections, log in to Blue Connect and go to Profile from the home page.
"Encounter" data is information about office visits and other interactions with providers that are paid for under a monthly (or annual) fee that BCBSNC pays a provider for furnishing care to members. This type of payment arrangement is referred to as a "capitation arrangement."
Blue Cross and Blue Shield of North Carolina does not discriminate on the basis of race, color, national origin, sex, age or disability in its health programs and activities. Learn more about our non-discrimination policy and no-cost services available to you.
© 2023 Blue Cross and Blue Shield of North Carolina. ®, SM Marks of the Blue Cross and Blue Shield Association, an association of independent Blue Cross and Blue Shield Plans. Blue Cross NC is an abbreviation for Blue Cross and Blue Shield of North Carolina. Blue Cross and Blue Shield of North Carolina is an independent licensee of the Blue Cross and Blue Shield Association.