Interoperability & Third-party Apps

Definitions to Know

  • Interoperability is how different computer systems are able to talk to each other.
  • Third-party apps are phone apps, software programs or websites that are outside of our health plan.
  • “The Plan” refers to InterCommunity Health Network Coordinated Care Organization.

Accessing Your Health Information

Some members may want to access their health information through a phone app or another website or health plan outside of our system. If you choose to use these services, we will need your permission before a third-party app can access to your health information from the Plan.

You are not required to use a third-party app to access your information, using an outside app is your choice.

How Privacy Rules Change Using Third-party Apps

We do not share your health information without your permission.

When the Plan shares your health information to a third-party app it does so in a secure way. Once the third-party app receives your information, the Plan does not control how the app uses, stores, or shares your information. Some apps may not follow HIPAA privacy and security rules.

Things to Consider Before Allowing Access to Your Data

It is your responsibility to decide if you want the third-party app to access and use your data. The Plan recommends the following questions be considered when deciding if an app has strong privacy and security standards:

  • Most third-party apps will not be covered by HIPAA, the law that outlines privacy and security requirements for health information.
  • These apps will fall under the Federal Trade Commission (FTC) and the protections provided by the FTC Act. This Act, among other things, protects against deceptive acts, like sharing personal data without permission, despite having a privacy policy that says it will not do so. You can find more information about mobile app privacy and security for consumers. 

If you suspect a third-party app you are using did not secure your data or used your data inappropriately, you can submit a complaint in the following ways:

  • Submit a complaint to the FTC. Since the Federal Trade Commission (FTC) has jurisdiction over these apps, you should submit a complaint to the FTC using the FTC complaint assistant.
  • File a HIPAA complaint. Your situation may fall under the HIPAA Privacy, Security, or Breach Notification Rules, or the Patient Safety Act and Rule. HIPAA is overseen by the U.S. Department of Health and Human Services (HHS) Office of Civil Rights (OCR).
  • Report privacy or security concerns to the Plan’s compliance officer at [email protected]. Though the Plan does not have relationships with the apps members may choose, we would like to hear of any privacy or security issues you may experience.

App developers can begin the registration process by visiting Samaritan Health Plan’s app registration portal.

Learn More – What Is the Patient Access Rule?

The Interoperability and Patient Access Rule (“The Rule”) from the Centers for Medicare & Medicaid Services (CMS) requires the Plan to offer and maintain a secure, standards-based way of allowing all members to easily access their health records through third-party apps of their choice. These health records include health insurance claims and other information submitted to the Plan by health care providers and hospitals. It may also include cost and other clinical information.

What to Know About the Patient Access Rule

  • The Rule does not allow the Plan to require or recommend an app.
  • Although the Plan provides a secure way of storing your data and a secure way of allowing the third-party app to access your data, the Plan has no control over what is done with the data once it is downloaded to the app.
  • The third-party app may not be subject to HIPAA privacy and security regulations.

Learn more about technology and choosing reliable health apps to manage your health.

Forms Needed to Share Your Information With Another Health Plan

With this form a member, or their authorized representative, allows Samaritan Health Plans/InterCommunity Health Network Coordinated Care Organization to share the member’s health information with another payer.  
Interoperability Payer Data Exchange Form (English)
Interoperability Payer Data Exchange Form (Español)

With this form, a payer is requesting Samaritan Health Plans/Intercommunity Health Network Coordinated Care Organization to intake a member’s health information.
Interoperability Payer Notification to Send Member Data (English) 

circle-chevronemailfacebookSHS AffiliateinstagramlinkedinMyChart IconMyHealthPlan IconphonepinterestSearch Iconsilhouettetwitterxyoutube