Evercare (“Evercare,” “we,” “us,” or “our”) is a care coordination services company operated by Scraft AI, Inc. This Privacy Policy explains how we collect, use, share, and protect information when patients, primary care physicians, care coordinators, and visitors interact with our website, our patient-facing communications, and our care coordination platform.
By using our services or communicating with us, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
1. Who We Are
Evercare provides care coordination services to independent primary care physicians (“PCPs”) and their patients, including services aligned with Medicare Advanced Primary Care Management (APCM) and related programs. When we deliver care coordination on behalf of a PCP, we act as a HIPAA Business Associate of that PCP under 45 CFR § 164.502(e), and any Protected Health Information (“PHI”) we handle is governed by the Business Associate Agreement between Evercare and the PCP.
This Privacy Policy covers information we collect directly from patients, website visitors, and care partners. PHI that we process on behalf of a PCP is additionally governed by that PCP's Notice of Privacy Practices and the applicable Business Associate Agreement.
2. Information We Collect
We collect the following categories of information:
Information you provide directly. This includes your name, date of birth, mobile phone number, email address, mailing address, insurance information, and any health or care-related information you share with an Evercare care coordinator verbally, by SMS, or through our platform.
Information from your primary care physician. When your PCP enrolls you in Evercare's care coordination program, they may share your contact information, clinical history, care plan details, and eligibility information with us so we can coordinate your care.
Information from health information networks. With appropriate authorization and under our PCP business associate relationships, we may retrieve clinical records from health information exchanges (including CommonWell and Carequality) to support your care.
SMS consent and messaging data. When you consent to receive SMS messages from Evercare, we collect your mobile phone number, your consent status, the date and time consent was given, the method of consent (for example, verbal consent captured by a care coordinator), and records of messages sent and received.
Technical and website data. When you visit our websites, we may collect IP addresses, browser type, device information, pages viewed, and similar analytics data through cookies and standard server logs.
3. How We Use Your Information
We use the information we collect to:
- Deliver care coordination services, including APCM and related Medicare care management programs, on behalf of your primary care physician
- Communicate with you about appointments, care plans, medications, referrals, and other care coordination matters
- Send you SMS messages you have consented to receive
- Support your PCP in billing Medicare and other payers for covered care coordination services
- Maintain audit-ready records of care coordination activities as required by CMS and other regulatory programs
- Operate, maintain, secure, and improve our services and platform
- Comply with legal, regulatory, and contractual obligations
We do not use your information for advertising, marketing to third parties, or any purpose unrelated to delivering the care coordination services you or your PCP have requested.
4. SMS Communications
This section describes how Evercare handles mobile phone numbers and SMS consent information.
How you opt in. You may consent to receive SMS messages from Evercare verbally, by providing your mobile phone number to an Evercare care coordinator during a phone call or in-person interaction after the coordinator explains the SMS program. When you provide verbal consent, the care coordinator records your phone number, the date and time of consent, and the coordinator's identifier in the Evercare platform.
What we send. SMS messages from Evercare include care coordination communications, appointment follow-ups, care plan updates, medication reminders, and clinical communication from your care team. Message frequency varies based on your care needs. Standard message and data rates may apply.
How we protect your SMS information. Your mobile phone number, SMS opt-in status, and SMS consent information will not be sold or shared with any third party or affiliate for promotional or marketing purposes under any circumstances. SMS opt-in data and consent information are excluded from any data sharing described elsewhere in this Privacy Policy and will not be transferred to affiliated businesses, partner organizations, or any other parties for any purpose unrelated to delivering the SMS messages you have consented to receive. No mobile information is shared with third parties or affiliates for marketing or promotional purposes.
Limited sharing with messaging vendors. We share your mobile phone number and message content only with the vendors that directly help us deliver your messages, including our messaging platform provider Telnyx and the communications infrastructure necessary to transmit SMS messages. These vendors are contractually prohibited from using your information for any purpose other than delivering the messages you have requested.
Opting out. You may opt out of SMS messages at any time by replying STOP to any message. Reply HELP for assistance or contact us at the email address below. After you reply STOP, you will receive a confirmation and will not receive further SMS messages unless you opt in again.
5. How We Share Your Information
We share your information only in the limited circumstances described below:
With your primary care physician. We share care coordination information, care plan updates, and clinical communication with your PCP as part of delivering care coordination services on their behalf.
With service providers and vendors. We share information with vendors that help us operate the Evercare platform and deliver services, including our hosting provider, database provider, messaging platform (Telnyx), health information exchange intermediaries (such as Metriport), and claims processing infrastructure. These vendors are bound by written agreements requiring them to protect your information and use it only for the purposes for which we engaged them. Where PHI is involved, these vendors sign Business Associate Agreements.
For treatment, payment, and healthcare operations. As a HIPAA Business Associate of your PCP, we may use and disclose PHI for treatment, payment, and healthcare operations as permitted under 45 CFR § 164.501 and the applicable Business Associate Agreement.
When required by law. We may disclose information when required by law, court order, subpoena, or valid government request, or to protect the rights, safety, or property of Evercare, our patients, or others.
We do not sell your personal information. We do not sell your personal information, mobile phone number, SMS consent data, or any other information to any third party under any circumstances.
We do not share mobile information for marketing. Your mobile phone number and SMS consent information are never shared with third parties or affiliates for promotional or marketing purposes.
6. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your information:
- The right to access the personal information we hold about you
- The right to request correction of inaccurate information
- The right to request deletion of your information, subject to legal and regulatory retention requirements
- The right to opt out of SMS messages at any time by replying STOP
- The right to withdraw consent for communications you previously authorized
- The right to file a complaint with a data protection authority
For PHI that Evercare processes on behalf of your PCP, please contact your PCP directly to exercise rights under HIPAA, including the right to request access, amendment, or an accounting of disclosures.
To exercise any of the rights described above, contact us at the email address in Section 11.
7. Data Security
We implement administrative, physical, and technical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction. These safeguards include encryption of data in transit and at rest, role-based access controls, audit logging, vendor due diligence, and ongoing security reviews. Where PHI is involved, our safeguards are designed to meet the requirements of the HIPAA Security Rule at 45 CFR Part 164, Subpart C.
No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and any required authorities in accordance with applicable law.
8. Data Retention
We retain your information only as long as necessary to deliver our services, meet legal and regulatory requirements (including CMS audit and record retention requirements for care coordination services), resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or de-identify it.
9. Children's Privacy
Evercare's services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice by email, SMS, or through our platform. We encourage you to review this Privacy Policy periodically.
11. Contact Us
If you have questions about this Privacy Policy or how Evercare handles your information, please contact us:
Evercare (Scraft AI, Inc.)
Email: jinhong@myevercare.org
Website: https://myevercare.org
For questions specifically about SMS communications, please reply HELP to any Evercare SMS message or contact us at the email address above.