Skip to content

Commit 174524d

Browse files
shihjay2shihjay2
committed
update privacy policy
1 parent 6594f3b commit 174524d

File tree

2 files changed

+60
-10
lines changed

2 files changed

+60
-10
lines changed

‎components/layout.tsx

Lines changed: 22 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -118,9 +118,20 @@ const Layout = (props: any) => {
118118
setTitle('Privacy Policy');
119119
setContent([
120120
'We collect emails to contact and identify you but we do not share them with anyone.',
121-
'We use Stripe. We do not have access to your credit card information.',
122121
'We do not read or use your information except as directed by policies you can customize.',
123-
'Trustee Community issues access credentials based on active Doximity accounts.'
122+
'We do not disclose your information except as directed by policies you can customize.',
123+
"Trustee Community issues access credentials based on a specific email invitation or a patient’s policy linked to active Doximity accounts.",
124+
'Patient data in the cloud is secured through encryption in transit and at rest. Access and policy enforcement are based on the IETF RFC 9635 protocol. Access authorization is secured with Passkeys to prevent password phishing and sharing.',
125+
'Data retention is entirely patient-controlled. Patients can easily delete their health record data at any time, leaving only their contact email in our files. We do not review, share or use invitation email addresses or other access authorization policies except for the specific purpose of access authorization.',
126+
'Trustee clinical data and authorization services are managed through typical hosting accounts at Digital Ocean, Inc. or Netlify, Inc. Neither HIE of One or our hosting providers share data with third-parties.',
127+
'As a free and non-commercial demonstration, Trustee accounts may be closed and data deleted at any time. Users are encouraged to make and keep local copies on their computer or mobile device.',
128+
'Trustee protects against unintended or overly broad data sharing in multiple ways:',
129+
'Patients have fine-grained control over health record segments they capture from hospital records via SMART on FHIR',
130+
'As a free service, patients concerned about family access demands can easily create alternate health records by simply using a different email address.',
131+
'The use of passkeys instead of passwords discourages requests for password sharing.',
132+
'Patients also have fine-grained control over data shared through invited access via email or via policy.',
133+
'Patients have access to synthetic data files as a “sandbox” to help them better understand health record and sharing functionality before using Trustee with real patient data.',
134+
'Restriction or withdrawal of an invited email address and changes in policy-based access are done on-line and effective immediately.'
124135
]);
125136
}
126137
if (type == 'support') {
@@ -225,11 +236,15 @@ const Layout = (props: any) => {
225236
{title}
226237
</LayoutDialogTitle>
227238
<DialogContent dividers>
228-
{content.map((text: string | number | boolean | React.ReactElement<any, string | React.JSXElementConstructor<any>> | React.ReactFragment | React.ReactPortal | null | undefined, index: any) => (
229-
<Typography gutterBottom key={index}>
230-
{text}
231-
</Typography>
232-
))}
239+
<ul>
240+
{content.map((text: string | number | boolean | React.ReactElement<any, string | React.JSXElementConstructor<any>> | React.ReactFragment | React.ReactPortal | null | undefined, index: any) => (
241+
<li key={index}>
242+
<Typography gutterBottom>
243+
{text}
244+
</Typography>
245+
</li>
246+
))}
247+
</ul>
233248
</DialogContent>
234249
</LayoutDialog>
235250
<Main open={openDrawer}>

‎pages/myTrustee/PolicySummary.tsx

Lines changed: 38 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,13 +13,48 @@ const PolicySummary = (props:any) => {
1313
We collect emails to contact and identify you but we do not share them with anyone.
1414
</li>
1515
<li>
16-
We use Stripe. We do not have access to your credit card information.
16+
We do not read or use your information except as directed by policies you can customize.
1717
</li>
1818
<li>
19-
We do not read or use your information except as directed by policies you can customize.
19+
We do not disclose your information except as directed by policies you can customize.
20+
</li>
21+
<li>
22+
Trustee Community issues access credentials based on a specific email invitation or a patient’s policy linked to active Doximity accounts.
23+
</li>
24+
<li>
25+
Patient data in the cloud is secured through encryption in transit and at rest. Access and policy enforcement are based on the IETF RFC 9635 protocol. Access authorization is secured with Passkeys to prevent password phishing and sharing.
26+
</li>
27+
<li>
28+
Data retention is entirely patient-controlled. Patients can easily delete their health record data at any time, leaving only their contact email in our files. We do not review, share or use invitation email addresses or other access authorization policies except for the specific purpose of access authorization.
29+
</li>
30+
<li>
31+
Trustee clinical data and authorization services are managed through typical hosting accounts at Digital Ocean, Inc. or Netlify, Inc. Neither HIE of One or our hosting providers share data with third-parties.
32+
</li>
33+
<li>
34+
As a free and non-commercial demonstration, Trustee accounts may be closed and data deleted at any time. Users are encouraged to make and keep local copies on their computer or mobile device.
35+
</li>
36+
<li>
37+
Trustee protects against unintended or overly broad data sharing in multiple ways:
38+
<ul>
39+
<li>
40+
Patients have fine-grained control over health record segments they capture from hospital records via SMART on FHIR,
41+
</li>
42+
<li>
43+
As a free service, patients concerned about family access demands can easily create alternate health records by simply using a different email address.
44+
</li>
45+
<li>
46+
The use of passkeys instead of passwords discourages requests for password sharing.
47+
</li>
48+
<li>
49+
Patients also have fine-grained control over data shared through invited access via email or via policy.
50+
</li>
51+
<li>
52+
Patients have access to synthetic data files as a “sandbox” to help them better understand health record and sharing functionality before using Trustee with real patient data.
53+
</li>
54+
</ul>
2055
</li>
2156
<li>
22-
Trustee Community issues access credentials based on active Doximity accounts.
57+
Restriction or withdrawal of an invited email address and changes in policy-based access are done on-line and effective immediately.
2358
</li>
2459
</ul>
2560
<h4>Optional Policies Available:</h4>

0 commit comments

Comments
 (0)