HIPAA Notice

HIPAA Notice of Privacy Practices

Effective Date: June 14, 2026

Last Updated: August 19, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU MAY ACCESS THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

HIPAA Privacy Notice Overview

This HIPAA Notice of Privacy Practices explains how Chime Health may use, disclose, and safeguard Protected Health Information (“PHI”) when applicable under federal law. This Notice also explains your privacy rights and how you may access, review, or request changes to your health information.

Our Commitment to Privacy

Chime Health is committed to protecting the privacy and security of your health information.

We understand that information about your health and healthcare is personal. When applicable, we are required by law to protect Protected Health Information (“PHI”), provide notice of our privacy practices, and comply with applicable federal and state privacy laws.

This Notice explains:

  • How your health information may be used and disclosed
  • Your privacy rights regarding health information
  • Our responsibilities for protecting health information
  • How to contact us with privacy questions or concerns

What Is Protected Health Information (PHI)?

Protected Health Information (“PHI”) is individually identifiable information that relates to:

  • Your physical health
  • Your mental health
  • Healthcare services provided to you
  • Payment for healthcare services

PHI may exist in electronic, written, or verbal form.

How We May Use and Disclose Your Information

Treatment

We may use and disclose information to coordinate healthcare services and treatment-related activities.

  • Sharing information with licensed healthcare providers
  • Reviewing health assessments
  • Coordinating care recommendations
  • Supporting clinical evaluation processes

Payment

We may use information to:

  • Process payments
  • Verify eligibility
  • Support billing activities
  • Manage healthcare-related financial transactions

Healthcare Operations

We may use information for healthcare operations, including:

  • Quality improvement
  • Compliance activities
  • Auditing
  • Training
  • Risk management
  • Administrative operations

Business Associates

We may work with third-party service providers that perform services on our behalf.

These providers may include:

  • Technology vendors
  • Cloud service providers
  • Licensed pharmacies
  • Laboratory partners
  • Communications providers

Where required by law, these parties are subject to contractual obligations designed to protect health information.

Legal Requirements

We may disclose information when required by:

  • Federal law
  • State law
  • Court orders
  • Regulatory authorities
  • Government agencies
  • Law enforcement requests when legally permitted

Public Health Activities

We may disclose information for certain public health or safety purposes when authorized or required by law.

How Chime Health Communicates With Patients

Chime Health may contact individuals regarding:

  • Appointments
  • Administrative matters
  • Service updates
  • Follow-up communications
  • Healthcare-related reminders

Phone Calls

We may contact you by telephone regarding healthcare services, appointments, support requests, and administrative matters.

Text Messages

We may send SMS communications regarding appointments, reminders, account updates, support requests, and service-related notifications.

Message and data rates may apply.

Email Communications

We may communicate using email for administrative, educational, and service-related purposes.

AI-Assisted Administrative Communications

Certain administrative communications may be facilitated by artificial intelligence (“AI”) technologies or automated systems.

  • Scheduling assistance
  • Appointment coordination
  • Customer support
  • Follow-up reminders
  • Administrative intake assistance

AI-assisted systems do not diagnose medical conditions, prescribe medications, determine treatment eligibility, or make clinical decisions.

Clinical decisions are made exclusively by licensed healthcare providers.

Your HIPAA Rights

Right to Access Information

You may request access to certain health information maintained about you.

Right to Request Corrections

You may request corrections or amendments to information you believe is inaccurate or incomplete.

Right to Request Restrictions

You may request restrictions on certain uses or disclosures of your information.

Right to Confidential Communications

You may request that we communicate with you through alternative methods or at alternative locations when reasonable.

Right to an Accounting of Disclosures

You may request information regarding certain disclosures of your health information.

Right to Receive a Copy of This Notice

You may request a paper or electronic copy of this Notice at any time.

Frequently Asked Questions

What is Protected Health Information (PHI)?

PHI is individually identifiable health information related to a person’s health condition, healthcare services, or healthcare payments.

Does Chime Health protect patient information?

When HIPAA applies, Chime Health handles protected health information in accordance with applicable federal and state privacy requirements.

Can I request access to my health information?

Individuals may request access to certain health information maintained by Chime Health, subject to applicable legal requirements.

How do I file a privacy complaint?

You may contact the Chime Health Privacy Officer using the contact information below.

Contact Information

Privacy Officer

Privacy Email:
privacy@chimehealth.com

Compliance Email:
compliance@chimehealth.com

General Support:
hello@chimehealth.com

Your Rights Regarding Your Health Information

Where applicable, you have the right to:

  • Obtain an electronic or paper copy of your medical record.
  • Request correction or amendment of your medical record.
  • Request confidential communications.
  • Ask us to restrict certain uses or disclosures of your health information.
  • Request an accounting of certain disclosures of your health information.
  • Obtain a copy of this Notice of Privacy Practices.
  • Designate an authorized personal representative to act on your behalf, where permitted by law.
  • File a complaint if you believe your privacy rights have been violated.

Certain rights may be subject to limitations or exceptions permitted by applicable law.

Our Responsibilities

Chime Health is committed to protecting the privacy and security of protected health information.

Where applicable, we:

  • Are required by law to maintain the privacy and security of protected health information.
  • Provide individuals with notice of our legal duties and privacy practices concerning protected health information.
  • Follow the terms of the Notice of Privacy Practices currently in effect.
  • Maintain appropriate administrative, technical, and physical safeguards designed to protect protected health information.
  • Notify affected individuals following a breach of unsecured protected health information when notification is required by law.
  • Obtain authorization before using or disclosing protected health information for purposes requiring authorization under applicable law.

Privacy Complaints

If you believe your privacy rights have been violated, you may submit a complaint to:

Chime Health Group LLC
Privacy Officer
privacy@chimehealth.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR).

Chime Health will not retaliate against you for filing a complaint or exercising your privacy rights.

Changes to This Notice

Chime Health reserves the right to update this HIPAA Notice of Privacy Practices at any time.

Updated versions will be posted on this page with a revised Effective Date.