Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
MDLIVE's privacy policy outlines several significant risks for users. Users transmit information online at their own risk, as the company cannot guarantee the security of personal data, which presents a high risk for potential data compromise (risk_flags-1). Any content users share in public areas of the platform is also at their own risk, as the company cannot guarantee it won't be viewed by unauthorized individuals (risk_flags-2).
Notably, MDLIVE explicitly states they are not a medical group and disclaim responsibility for the privacy practices of the independent medical groups or individual providers who handle users' health information (risk_flags-3). This means users must look to their specific medical provider's privacy notices for how their protected health information (PHI) is managed, rather than MDLIVE's policy.
The policy details extensive collection of personal identifying information, including sensitive data such as Social Security Numbers, medical history, and health insurance information (data_use-1). Furthermore, medical telehealth visits may be recorded for various purposes with user consent (data_use-2), and the service may collect a broad range of device information, including data from other mobile applications like personal contacts and health information from services such as iOS HealthKit (data_use-3).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Critical issues and red flags that could lead to significant harm.
high95% confidence
Unsecured Internet Transmission Risk
Information transmitted over the Internet is not completely secure, and the company cannot guarantee the security of Personal Information transmitted to their Website or through their Application.
Why it matters: Users face the risk that data transmitted online is not completely secure, and the company cannot ensure its safety, meaning Personal Information could be vulnerable during transmission.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we work diligently to try and protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website or on or through our Application. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website, in your operating system, or in the Application.
**8. Data Security**, paragraph 4 · Citation strength: strong
high90% confidence
Risk of Unauthorized Viewing of User Contributions
User Contributions provided by users to public areas of the Website or Application are posted and transmitted at the user's own risk, and the company cannot guarantee they will not be viewed by unauthorized persons.
Why it matters: Any content users post in public areas or share with others is at their own risk, and the company cannot assure them it won't be seen by unauthorized people.
Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Website and Application with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
**Information You Provide to Us**, paragraph 3 · Citation strength: strong
high95% confidence
MDLIVE's Disclaimer of Responsibility for Medical Group's Privacy Practices
MDLIVE is not a medical group, and the MDLIVE Medical Group (or the user's own medical provider) is responsible for providing a Notice of Privacy Practices describing the collection and use of health information, not MDLIVE itself.
Why it matters: Users' health information privacy practices are controlled by the medical group or their own provider, not MDLIVE, meaning MDLIVE disclaims responsibility for those specific privacy practices.
MDLIVE Medical Group (or your own medical provider if you do not use a MDLIVE Medical Group Provider) is responsible for providing you with a Notice of Privacy Practices describing its collection and use of your health information, not MDLIVE. If you do not agree to be bound by those terms, you are not authorized to access or use our Website, and you must promptly exit our Website or Application.
This policy applies to information we collect:, paragraph 3 · Citation strength: strong
Data Use
How the company collects, uses, and shares your personal information.
medium90% confidence
Broad Collection of Personal Information to Identify Users
The company collects various types of Personal Information that can identify users, including name, address, email, phone numbers, date of birth, credit/debit card numbers, audio, images, videos, gender, Social Security Number, medical history, health insurance information, and health information.
Why it matters: The service collects a wide range of personal identifying information, including sensitive details like medical history and Social Security Number, and users should be aware of this comprehensive data collection.
by which you may be personally identified, such as name, address, e-mail address, home, work, and mobile telephone numbers, date of birth, credit or debit card number (for payment purposes only), audio (including recordings and transcripts), images and videos of you, gender, Social Security Number, your medical history, health insurance subscriber information, and health information;
Recording of Medical Telehealth Visits with Consent
Video and audio from medical telehealth visits may be recorded for purposes including treatment, quality improvement, payment, and operational efficiency, with specific consent from the user.
Why it matters: Medical telehealth visits may be recorded for various purposes, including treatment and payment, requiring explicit user consent.
Video and audio from your medical telehealth visit may be recorded for purposes which may include treatment, quality, improvement of health status, customer and patient experience, customer and patient engagement and/or behavior modification, peer review, payment, efficiency, cost effectiveness and/or other purposes relating to operations and provision of telehealth services. Behavioral health visits are not recorded. By using the telehealth services available through our Website and Application you specifically consent to the recording of the medical visit.
**Information You Provide to Us**, paragraph 4 · Citation strength: strong
medium90% confidence
Collection of Device Information and Information from Other Applications
The company may collect information about users' mobile devices and internet connections, including unique device identifiers, IP addresses, operating systems, browser types, mobile network information, and telephone numbers. Additionally, information stored on mobile devices, including from other applications such as photographs, audio/video clips, personal contacts, and health information (e.g., via iOS HealthKit), may be collected.
Why it matters: The company collects extensive device information and can access data, including health information and personal contacts, from other applications on users' mobile devices.
information about your mobile device and internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information, and the device’s telephone number; * information stored on your mobile device, including in other applications. This may include, photographs, audio and video clips, personal contacts, and health information. In particular, we may collect information through your iOS HealthKit application. This data will be used only to provide and improve our services, and will not be used or shared with third parties for marketing purposes;
**Information We Collect Through Automatic Data Collection Technologies**, paragraph 2 · Citation strength: strong
Cancellation and Renewal
Terms related to subscription, cancellation, and renewal policies.
Not clearly stated: The provided text does not contain information about account cancellation specifics, such as how to cancel or any associated fees, nor does it address renewal policies or terms.
Gotchas
Potentially overlooked clauses that could be unfavorable to the user.
Not clearly stated: The provided text does not contain any 'gotcha' clauses that meet the criteria for this section.
Protections
Commitments and features that benefit users.
Protection95% confidence
Parental Consent for Children Under 18
The Website and Application are not intended for children under 18 without parental consent, and for those under 13, parental supervision and consent are required, including for Provider consultation services.
Why it helps: This helps protect minors by requiring parental involvement for account creation and service use, ensuring parents oversee their children’s interactions and data submission.
Our Website and Application are not intended for children under the age of 18 without parental consent.
**2. Children Under the Age of 18.**, paragraph 1 · Citation strength: strong
Protection95% confidence
Prompt Deletion of Personal Information for Under-13 Minors
If the company learns that Personal Information has been collected from someone under 13 without proper parental supervision and consent, they will promptly delete that information.
Why it helps: This protects young children by ensuring that any data collected without parental consent from individuals under 13 is quickly removed, preventing unauthorized storage and use.
If we learn that we have collected Personal Information from someone under the age of 13 that was not provided with the supervision and consent of the minor’s parents or legal guardian, we will promptly delete that information. If you believe we have impermissibly collected Personal Information from someone under the age of13, please contact us using the information below.
**2. Children Under the Age of 18.**, paragraph 2 · Citation strength: strong
Protection90% confidence
User Control Over Personal Information and Account Deletion
Users can review and change their Personal Information through their account settings and can request changes or errors to be corrected, or request account deletion, although deleting an account also means deleting associated Personal Information.
Why it helps: This provides users with direct control over their personal data, allowing them to correct inaccuracies and decide to remove their information by deleting their account.
You can review and change your Personal Information by logging into our Website or Application and visiting either the Account Details section of our Application or Website. You may also notify us through the Contact Information below of any changes or errors in any Personal Information we have about you to ensure that it is complete, accurate, and as current as possible or to delete your account. We cannot delete your Personal Information except by also deleting your account with us.
**7. Your Rights Regarding Your Information and Accessing and Correcting Your Information**, paragraph 2 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.