myRiverside Privacy Policy

myRiverside Privacy of Your Health Care Information

Your privacy is important to us. The information you provide on this website is protected by federal laws. To learn more about how your rights to privacy are being protected, please review our Notice of Privacy Practices or contact our Privacy Officer at (815) 432-7685.

Riverside Healthcare Online Privacy Policy

Riverside Healthcare supports and recognizes our patients' right to expect that their medical records and other information about their care will be kept confidential. For questions regarding privacy practices, HIPAA concerns, or online privacy, please use our Contact Us page.

Riverside Healthcare is committed to protecting the privacy of visitors to our website. Information gathered on our website is used to monitor our effectiveness in providing relevant and credible health information, answering questions, and improving our website.

What information do we collect?

We do not automatically collect the email address of visitors to our website. The only way we obtain your name or email address is when you choose to provide that information to us. Examples of how you might provide us with such personal information include:

Completing a survey, assessment, or feedback form
Emailing us with a comment or question
Subscribing to a newsletter or other notification service
Establishing a personalized homepage via our website

We use Google Analytics to collect data that allows us to better understand how visitors interact with our website. Google Analytics will automatically gather and store certain information about your visit. This information does not identify you personally and is used in a general way to help us improve our website. We automatically collect and record the following information:

Aggregate information on what pages are accessed
Address of the website that linked to us (referral URL)
Date and time you access our site
Name and release number of web browser software used
Operating system used
Visitor's IP address

myRiverside may interact with your sensitive data to provide certain features, such as video visits or mobile appointment check-in. The first time you try to use any of these features, we will ask for your consent within the app and will only allow you to use a feature if you give consent. You do not have to provide consent if you do not want to allow myRiverside to interact with your data as requested. myRiverside is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways they may interact with your information to make your use of myRiverside possible.

myRiverside may offer location-based check-in for in-person appointments or allow you to find healthcare providers near you. The first time you try to use any features that use your location, we will ask for your consent within the app and will only access your location if you give consent. You do not have to provide consent if you do not want to allow myRiverside to use your location. We do not store your location data.

Any data the myRiverside collects is not shared with third parties.

We do not knowingly collect personal information from children. In specific forms where we may ask for information about children, we take steps to protect the privacy of those children by making reasonable efforts to ensure that a parent has entered or authorized the collection of the child's personal information.

How do we use the information we collect?

Riverside Healthcare does not sell, trade, or rent personal information about its website visitors. The information we collect about site visitors is aggregated and used solely to determine general information about how the site is being used.

Email addresses provided by visitors are used to respond to comments submitted through our feedback and surveys forms when indicated. Email addresses provided when subscribing to email newsletters or notifications are used to distribute this information to the subscribers. Information provided by visitors who choose to establish a personal account is used to furnish personalized pages with the data requested by the visitor, and to send information requested by the visitor.

If a website visitor asks us to send material that cannot be transmitted electronically, we will need to know the visitor's name, email address, and mailing address. We will use that information only to fulfill the visitor's request. Website visitors who complete a website survey and indicate a willingness to participate in future surveys are asked to provide their name, email address, and telephone number. That information may be shared with carefully screened third parties with whom Riverside Healthcare has business relationships.

How can I get my name removed from Riverside's files?

If you do not want to receive an email from Riverside Healthcare, please let us know by sending an email notification to web@riversidehealthcare.org. When you write, provide the following information:

Your full name
The email address(es) you want to be removed
A sentence asking that your email address be removed from our files
"Unsubscribe" in the subject line

Cookies

Our site may place cookies in your browser. A cookie is an element of data that the website can save to your computer through your browser. Cookies allow your browser to retain information about how you use a website so that the site can be customized for you on future visits. Cookies may remain on your computer for any length of time.

Your Consent

By using our website, you consent to the collection and use of the information discussed above by Riverside Healthcare, and to the saving of cookies on your computer. Changes in this policy will be posted on this page so that you may always be aware of what information is being collected, how it is being used, and under what circumstances it is being disclosed.

Epic Mobile Application Privacy Policy for Patients

Overview

Mobile Apps for Patients

Our mobile applications for patients, including MyChart for iOS and Android, connect to servers and systems operated and maintained by healthcare organizations that use Epic – to provide patients with secure, mobile access to health information in those servers and systems.

We refer to our mobile applications for patients as “mobile apps” in this policy.

This Privacy Policy

This policy describes how we collect and use your information when you use our mobile apps.

We may update this policy at any time, and future updates are effective as soon as they are published. Your use of any of our mobile apps is also subject to the applicable End User License Agreement. If you use our mobile apps, you agree to the applicable End User License Agreement and consent to the use of your information as described in this policy.

Your Personal Information

The Limited Ways We Use Your Information

We do not sell or license your information. These are the limited ways we interact with your information in connection with our mobile apps:

When you choose to add a profile photo to our mobile apps, you may select an existing photo on your device or take a new photo using the camera app on your device. If you select an existing photo on your device, we store a copy of your chosen photo in app-private storage on your device. If you use the camera app on your device to take a new photo, the photo you take is first saved to your camera app and then also saved to app-private storage on your device. If you remove the photo from your profile or delete our mobile apps, the copy of the photo is deleted from the app-private storage, but the photo saved to your camera app remains available in your camera app until you choose to delete it. If you already have a photo stored in your profile through your healthcare organization – we do not interact with that photo in any way.
When you choose to use Apple’s HealthKit or Google Fit, we create encrypted identifiers to identify recipients of your Apple’s HealthKit or Google Fit data and store them on your device in app-private storage. If you choose to stop using Apple HealthKit or Google Fit or delete our mobile apps, the identifiers are deleted. When you choose to view documents from your healthcare organization (such as letters or images) using our mobile apps, to make the files viewable for you we temporarily store copies on your device in app-private storage. The temporary copies are deleted when you close your session on our mobile apps.
If your healthcare organization offers automatic appointment arrival and you choose to enable it, we temporarily store identifiers and times for your upcoming appointments in app-private storage to detect when you arrive for an upcoming appointment. If you choose to stop using our mobile apps or you disable automatic appointment arrival, the identifiers are deleted.
If your healthcare organization offers location-based check-in for in-person appointments or allows you to find healthcare providers near you, you may choose to allow our mobile apps to interact with your location data for those purposes. We do not store your location data.
If your healthcare organization allows you to notify front desk staff electronically when you arrive for an appointment, you may choose to allow our mobile apps to interact with your Bluetooth data for this purpose. We do not store your Bluetooth data.
While you use our apps, we collect non-identifying information so we can provide customer service to you or your healthcare organization and understand how people use our mobile apps so we can improve our products. This information includes the time you began using the app, the healthcare organization you interacted with, any error messages or codes, the model of the device used and its operating system, and the version of our mobile app used. If you use Android devices, we also collect your connection type (cellular or WiFi) during an error. You may contact us through the methods listed on Our Website. If you contact us, we may keep a record of the communication. You can decide how much information you want to share with us in those cases.

Your Healthcare Organizations

To use our mobile apps, you must have an account with a healthcare organization using Epic’s software. Because of this, your use of our mobile apps is also subject to your healthcare organization’s privacy policy. Please contact your healthcare organization if you have any questions about their privacy policy.

For Android Users – Required Google Play Disclosures for Certain Health Apps

Google has determined our mobile apps are subject to their COVID-19 apps requirements. As a result, we are required to provide the following information so we can make our mobile apps available to you in the Play store.

Our mobile apps interact with your microphone only if you choose to use your microphone to navigate our mobile apps. Our mobile apps interact with your camera roll only if you choose to add a profile photo to a profile in our mobile apps. This information is not used in connection with COVID-19.
Our mobile apps access, collect, use, and share your information as stated above in the section titled, “The Limited Ways We Use Your Information.”
Our mobile apps were not created specifically for the COVID-19 pandemic. They existed before the COVID-19 pandemic to allow you to access your health information on file with your healthcare organization. Your healthcare organization may allow you to access COVID-19-related vaccination information, laboratory test results, and documents with illness-related information using our mobile apps. You may choose if or how you want to access, display, or use the information – just like you can make those decisions about health information relating to other conditions, services, tests, or vaccinations.
Your healthcare organization may allow you to use our mobile apps to conduct telehealth appointments with your healthcare providers. Our mobile apps only provide the technical support for those appointments to happen. We do not interact with any health information about you exchanged during any telehealth appointments.

How We Protect Your Personal Information

We use technical controls and safeguards to protect the privacy, security, integrity, and availability of your personal information.

We enable the use of multi-factor authentication for users of our mobile apps by default. Multi-factor authentication is required when you use our mobile apps unless your healthcare organization makes or allows changes to this control.
We use HTTPS for secure communication between servers.
When we store data on your mobile device, we store it in app-private storage that cannot be accessed by other apps.
Before data is shared from our mobile apps, we provide in-app notifications so you can choose if you want to share the data.
We disable screen-shot functionality by default for Android devices and allow Android users to choose if they want to enable the function. We cannot disable this functionality in iOS.
We maintain internal policies and processes that limit access to your information to our staff who need to know the information to perform their jobs.
We maintain internal data retention and deletion policies to help us ensure we only store information about your use of our mobile apps as we describe in this policy.

Each healthcare organization you connect to through our mobile apps also uses safeguards to protect your information. Contact them if you have any questions about their safeguards.

You can take other steps to protect your information:

Do not share the username and password you use with our mobile apps.
Change your password immediately if you believe any unauthorized access has occurred.
Use the security tools on devices you use with our mobile apps.
Do not root or jailbreak devices you use with our mobile apps. Doing so can create security risks by removing your device’s built-in security measures and exposing sensitive information on your device.

Your Privacy Rights

GDPR and UK GDPR Privacy Questions

If you need to contact our Data Protection Officer or EU Representative, please email EUPrivacyInquiries@epic.com or call +1 608-271-9000. If you are a Data Subject as defined by GDPR, you should reach out to your healthcare organization for requests related to your personal data accessed through our mobile apps.

California Privacy Questions

Please visit our Privacy Notice for California Residents.

Contact Epic

If you have any questions about this policy, contact us at +1 608-271-9000 or at PrivacyInquiries@epic.com.

If you have questions about your information in an account with a healthcare organization using Epic’s software, please reach out to your healthcare organization using the contact information in their privacy policy.