Effective Date: April 2026
Mission-Driven Privacy: At VITIA, we put patients first. Our privacy practices are designed to protect your health journey while using innovation to simplify and humanize care.
In the United States, VITIA operates in a dual capacity. When invited by your healthcare provider, we act as a Business Associate. If you sign up independently to manage your own data, we act as a Service Provider governed by our consumer privacy commitments and the FTC Health Breach Notification Rule.
The entity responsible for the collection and processing of your data is Vitia Inc., a healthcare technology company headquartered at 6633 18 Mile Rd, Sterling Heights, MI 48314 . VITIA is committed to transforming patient-generated data into actionable medical insights while upholding the highest standards of privacy and clinical integrity.
For privacy-related inquiries or to exercise your rights under HIPAA or applicable state laws, please contact our Data Protection Office at: data.protection@vitia.ai. Company Website: https://vitia.ai.
1. Our Role as a Business Associate
VITIA provides services to healthcare providers, health systems, and clinicians. In this capacity, we act as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA). We process your Protected Health Information (PHI) according to the Business Associate Agreements (BAAs) we sign with your healthcare providers.
2. Categories of Information We Collect
To fulfill our mission of transforming patient-generated data into actionable medical insight, we collect:
- Clinical PHI: Medical history, medication adherence, vital signs, and symptoms.
- Patient-Generated Data: Data from wearable devices, “Patient Diary” entries, and lifestyle information.
- Authentication Data: User credentials and device identifiers for secure platform access.
3. How We Use Your Information
We use PHI for the following purposes:
- Treatment & Care Coordination: Sharing data with your authorized doctors to close care gaps.
- AI-Driven Insights: Running data intelligence to provide you and your doctor with “actionable insights” for better health outcomes.
- Healthcare Operations: Optimizing costs and improving healthcare value for the ecosystem.
4. Data Sharing and Third-Party Clause
We do not sell your health data. We share information only with authorized parties:
- Authorized Providers: Clinicians you have selected or who have prescribed VITIA.
- Integration Partners: Electronic Health Record (EHR) systems (e.g., Epic, Cerner) via secure APIs.
- Service Providers: Secure cloud infrastructure (Azure) and technical vendors who are also bound by HIPAA BAAs.
- Optional Commercial Partners: Only with your explicit opt-in, we may share de-identified data with pharmaceutical or research partners to improve future care pathways.
5. Your HIPAA Rights
Under the HIPAA Privacy Rule, you generally have the right to:
- Inspect and obtain a copy of your health records.
- Request an amendment to incorrect information.
- Request a restriction on how your PHI is used or disclosed.
- Receive an “Accounting of Disclosures” of your PHI.
6. Security and “Privacy by Design”
Managed by our CTO and Data Security Officer, VITIA employs “Privacy by Design”. This includes end-to-end encryption, multi-factor authentication, and continuous monitoring of our integration backbone to ensure clinical integrity.
7. Contact and Complaints
For questions or to exercise your rights, contact our Privacy Office at privacy@vitiacare.com. You also have the right to file a complaint with the U.S. Department of Health and Human Services (HHS).