HIPAA Notice

This notice explains how Mano AI Inc., doing business as Clearest Health, relates to the Health Insurance Portability and Accountability Act (HIPAA) when supporting healthcare practices, and where to direct patient information requests and privacy concerns.

1. 1. Our role

   Clearest provides claims management and Independent Dispute Resolution (IDR) support to healthcare practices. When we create, receive, maintain, or transmit protected health information (PHI) on behalf of a covered healthcare practice in that work, we act as a business associate. Applicable HIPAA requirements and the relevant business associate agreement (BAA) govern that information.

   This page describes that role and how to direct questions. It is not a healthcare provider’s Notice of Privacy Practices, a BAA, or an authorization to disclose patient information. Your healthcare provider’s notice describes its own uses of health information and your rights.

2. 2. Before sharing patient information

   Practices should arrange the applicable service agreement and BAA with Clearest before providing PHI, and use the designated service channel agreed during onboarding. Share only the information appropriate to the authorized task and applicable requirements.

   Public website contact forms, practice report requests, and scheduling messages are intended for business inquiries. Do not include patient names, medical records, patient-identifying insurance details, or other PHI. Website analytics and other public-site data practices are described in our Privacy Policy; that policy does not authorize processing PHI through these public tools.

3. 3. Uses, disclosures, and safeguards

   When acting as a business associate, Clearest’s uses and disclosures of PHI are limited by the applicable BAA and law. The BAA defines the permitted services and responsibilities; it does not give unrestricted permission to use patient information.

   HIPAA requires business associates to apply appropriate safeguards, comply with applicable Security Rule requirements for electronic PHI, and meet applicable incident and breach reporting obligations. Subcontractors handling PHI on a business associate’s behalf must agree to the applicable restrictions and protections. Retention, return, and destruction of PHI are subject to the relevant agreements and legal requirements.

4. 4. Patient requests

   If you are a patient seeking access to or correction of your records, an accounting of disclosures, or information about other HIPAA rights, contact your healthcare provider using the instructions in its Notice of Privacy Practices. Your provider is the starting point for these requests. Clearest’s assistance with information held on a practice’s behalf is governed by the applicable BAA and law.

   If you are unsure whether a concern involves Clearest, contact [email protected] with a general description and a way to reach you. Do not attach medical records or include sensitive patient details in your initial email; request an appropriate channel for any further information.

5. 5. Privacy or security concerns

   Practices should report suspected incidents involving Clearest through their agreed service contact or [email protected]. Provide a general description without including PHI in the initial message so the concern can be directed to the appropriate channel.

   You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights (OCR). See the official OCR complaint instructions for filing methods and deadlines. HIPAA prohibits retaliation for exercising protected rights or filing a complaint.

6. 6. Related agreements and guidance

   Read our Services Agreement for the published service terms. A practice’s executed agreements, including its BAA, control the specific service relationship, subject to applicable law.

   For more information, see HHS guidance on business associates and Notices of Privacy Practices. We may update this page as our services or applicable guidance change.