Privacy
We collect only what we need to check if you may qualify and to send your referral: your name, phone, address, date of birth and health need. If you qualify, our staff may ask for your Medicaid ID on the phone. Your date of birth, address, health information and Medicaid ID are encrypted and only shown to the staff who need them. We never ask for your Social Security number. We never sell your information. To ask what we have or to stop, call or text us.
How we protect your health information
ConnectCare NY is built to HIPAA standards, the U.S. rules for protecting health information.
To help you get free healthy meals, we collect some health information. Here is how we keep it safe, in plain words.
- Encrypted
- Your information is encrypted while it travels to us (secure HTTPS connections only) and while it is stored: our database, uploaded files and backups are all encrypted. Your date of birth, address, health information and Medicaid ID get an extra layer of encryption.
- Only the staff who need it
- Only staff who need your information to set up your meals can see it, and each person sees only what their job needs. Every staff member has their own account, protected with a two-step sign-in (a password and a code from an app). Your Medicaid ID and date of birth stay hidden until an authorized staff member asks to see them, and that is logged.
- Every look is logged
- When staff open, change or export your record, it is written to an access log that staff cannot edit or delete. We keep that log for 6 years.
- Never sold, never used for ads
- We never sell your information. We never share your health information, Medicaid ID or contact details for advertising. We use your information only to check if you may qualify, to send your referral to New York's Social Care Network and its food partners, and to contact you about your meals.
- See it, fix it or delete it
- You can ask what information we have about you, ask us to fix it, or ask us to delete it. When we delete it, your name, contact details and health details are erased. We keep only counts with no name attached, and a note that the deletion happened.
- Questions or requests
- Call or text us at , or email info@connectcareny.com. We will help you in English or Spanish.
Accessibility
This site is built to meet WCAG 2.1 AA: large text, keyboard access, screen-reader labels, and English, Spanish and Chinese. If anything is hard to use, call or text us and we will help.
[Draft. Lipa's lawyer / HIPAA consultant to approve the final privacy notice.]