ViewFi Health, Inc. Privacy Policy
Last updated: September 29, 2026
Your privacy is important to ViewFi Health, Inc. (“ViewFi,” “we,” “us,” or “our”). ViewFi operates a virtual musculoskeletal care platform that supports orthopedic and sports medicine care through our website (the “Site”), the services offered on or through the Site (the “Services”), and any software that we provide for installation and use on a mobile device that permits you to access and use the Services (each, a “Mobile Application”) and collectively with the Site and Services, the “ViewFi Platform”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with the Services.
ViewFi provides the ViewFi Platform and related technology and administrative support but does not itself provide medical advice, diagnosis, or treatment. Clinical and healthcare services available through the ViewFi Platform are provided by ViewFi’s independent, affiliated medical clinics (the “Clinics”) and their licensed healthcare providers. The provider-patient relationship is between you and the applicable Clinic and treating healthcare provider, each of which is responsible for clinical care and provider-authored clinical documentation. When we process protected health information on behalf of a Clinic, a healthcare provider, health plan, or other covered entity, we may act as a business associate, subcontractor, or service provider, as applicable. That information may also be governed by HIPAA, a Notice of Privacy Practices, a business associate agreement, or the applicable Clinic’s or healthcare provider’s policies. If there is a conflict, the applicable Clinic, provider or customer agreement controls.
This Privacy Policy does not apply to third-party websites, applications, services, healthcare providers, health plans, or other organizations that we do not control. Those third parties may have their own privacy policies.
If you do not agree with this Privacy Policy, please do not use the ViewFi Platform. Your use of the ViewFi Platform may also be subject to ViewFi’s Terms of Service.
Notice for Washington and Nevada consumers: If you are a Washington or Nevada resident, or if your consumer health data is collected or processed in Washington or Nevada, please review our separate Consumer Health Data Privacy Policy for additional information about how we collect, use, disclose, and otherwise process consumer health data under applicable laws, including the Washington My Health My Data Act and Nevada consumer health data law, and how you may exercise applicable consumer health data rights.
Table of Contents
3. How We Use Personal Information
4. Cookies, Analytics, and Similar Technologies
5. How We Disclose Personal Information
13. Changes to This Privacy Policy
1. Scope of This Policy
This Privacy Policy applies to personal information collected through the ViewFi Platform, including patient portal features, telehealth functionality, care-related communications, support interactions, and other Services that link to this Privacy Policy. The ViewFi Platform is designed for use in the United States and is not intended to be offered or directed to individuals outside the United States.
Personal information. For purposes of this Privacy Policy, “personal information” means information that identifies, relates to, describes, or could reasonably be linked to an individual or household. It does not include information excluded from applicable privacy laws, such as publicly available, deidentified, or aggregated information.
HIPAA and provider-managed information. ViewFi may provide the Services to or in coordination with healthcare providers, physician groups, the Clinics, health plans, employers, or other organizations for use with their patients or members. In some cases, ViewFi may process protected health information on behalf of a HIPAA-covered Clinic, healthcare provider, health plan, business associate, or other healthcare customer. When we process protected health information in that capacity, we do so as a business associate, subcontractor, or service provider, as applicable, and that information is governed by HIPAA and the applicable business associate agreement, services agreement, data processing agreement, Notice of Privacy Practices, or similar arrangement.
This Privacy Policy describes ViewFi’s privacy practices for the Services, but to the extent we process protected health information on behalf of a healthcare customer or provider and there is a conflict between this Privacy Policy and the applicable healthcare customer, provider, or partner agreement, the applicable agreement will control.
Healthcare-provider relationships. If you access the Services through a participating provider, employer, health plan, or other partner, that organization may control or retain certain information and may provide its own privacy notice.
2. Information We Collect
We collect different types of personal information depending on how you interact with ViewFi, including as a patient, parent or legal guardian, healthcare professional, care-team member, business contact, Site visitor, or registered user.
Information you provide or that is provided for your care.
- Identifying and contact information, such as your name, email address, telephone number, date of birth, address, the state in which you are physically located during a telehealth visit, to confirm provider licensure and service availability, eligibility information, and parent or legal guardian information when applicable.
- Account and access information. Patient accounts are provisioned by ViewFi or your care team, or access may be established when you access ViewFi through a participating partner application using that partner’s sign-in, such as Transcarent. Patients do not create accounts through an open self-registration form. For most patients, access is authenticated using a one-time access code sent by ViewFi to the contact information provided at intake; partner users access the Services through partner single sign-on. Patient access does not require a username and password.
- Health and care information, including intake and screener responses; at-home examination test selections, observations, measurements, and results; information about injuries, musculoskeletal conditions, symptoms, pain, medical history, allergies, medications, physical examinations, diagnoses, treatment, referrals, care plans, insurance and coverage information, emergency contact information used for safety, emergency, or care-coordination purposes, occupation, sex and gender identity, video, images, and related visual information captured during at-home exams or video visits, and communications with your healthcare providers.
- Telehealth documentation support. This feature is disabled by default. If enabled for an appointment and subject to any required consent, we may use automated technologies, including artificial intelligence, to record and transcribe the visit audio to prepare a summary of the clinically relevant content discussed, for use by your care team as a reference. The summary is separate from, and does not replace or alter the clinical documentation authored and signed by the treating healthcare provider. The audio recording and verbatim transcript are deleted once the summary is generated and are not retained.
- Payment and transaction information, such as payment method and billing details. Payments are processed by our payment processing service providers, which may tokenize payment information; ViewFi does not receive your full card number.
- Support and communications information, including requests, feedback, messages, appointment or care communications, and other information you send to us.
- Information from providers, partners, and other sources, such as care-team referrals, partner sign-in information, eligibility information, or information necessary to coordinate your care.
- If you interact with ViewFi as a healthcare professional, provider, vendor, prospective customer, or other business contact, we may collect your name, work contact information, organization, role, credentials, communications, service usage, support requests, and other information you provide in that capacity.
Information collected automatically.
When you use the ViewFi Platform, we and our service providers may collect device, usage, and diagnostic information, including vendor-generated device and session identifiers, device type, operating system, Mobile Application version, screen resolution, browser and network information, screens viewed, actions taken, clicks, crash reports, performance measurements, and other standard logs. We do not collect advertising identifiers. We may derive approximate location from your IP address at a city or regional level, but we do not collect GPS or precise location.
We and our service providers may use diagnostic, analytics, and interaction-monitoring technologies to help provide technical support, troubleshoot errors, maintain security, understand how the Services function, and improve the user experience. These technologies may collect information about screens viewed, features used, clicks, interactions, device and browser information, performance, and other usage information. Depending on the configuration and context, this information may include information displayed or entered during a session, including health information.
We may collect this information when you use the ViewFi Platform, whether or not you are signed in.
Sensitive information. The Services involve health information and other information that may be sensitive under applicable law. We process sensitive information only for disclosed purposes, to provide and administer care and the Services, and as permitted by applicable law. Where consent or another authorization is required, we obtain it before processing, including verifiable parental or guardian consent where required.
3. How We Use Personal Information
We use personal information for the following purposes:
- Provide, operate, maintain, secure, troubleshoot, and support the ViewFi Platform, including virtual musculoskeletal, orthopedic, and sports medicine care, telehealth visits, patient portal and Mobile Application features, appointment scheduling, provider communications, and customer support.
- Create and administer accounts, provision access, authenticate users through one-time codes or partner single sign-on, manage provider or partner relationships, and maintain access, safety, and audit records.
- Use health and care information to support care delivery, care coordination, clinical documentation, clinician-reviewed draft documentation, care-team reference materials, provider support, and related administrative functions, including through automated technologies where enabled and permitted.
- Use automated technologies, including artificial intelligence, to support care-team reference materials; prepare draft clinical documentation, such as draft physician notes and physical-therapy evaluation sections, for review, editing, and signature by the responsible clinician; assist providers with reviewing intake information, selecting appropriate examination tests, drafting care goals, refining text, summarizing documents, and preparing source-referenced chronologies; and other clinician-support administrative and operational workflows, such as routing shared support inquiries. These technologies are assistive, do not make independent clinical decisions, and do not replace the judgment of the treating healthcare provider. Any AI-generated draft used as clinical documentation is reviewed, edited as needed, and signed by the responsible clinician.
- Use clinical artificial-intelligence services within ViewFi-controlled systems, subject to access controls, generation logging, and applicable contractual safeguards. ViewFi and its AI service providers do not use personal information or patient data to train, fine-tune, or improve AI or machine-learning models. The artificial-intelligence functionality described in this Policy supports clinicians, care teams, and ViewFi operations and is not intended to provide medical advice, diagnosis, or treatment directly to patients. ViewFi does not apply AI to analytics, usage, or product-improvement data.
- Process payments, billing, and related transactions.
- Operate, test, debug, repair, update, analyze, improve, and develop the Services, including through diagnostics, interaction-monitoring, analytics, and deidentified or aggregated information where permitted by law.
- Send administrative, transactional, service, support, security, legal, and other non-marketing communications, including appointment reminders and care updates. We do not send marketing or promotional communications to patients.
- Comply with applicable law and legal process; enforce agreements; protect rights, safety, privacy, property, systems, and networks; prevent fraud or misuse; and support a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction.
4. Cookies, Analytics, and Similar Technologies
We and our service providers may use cookies, pixels, local storage, software development kits, logs, diagnostic, interaction-monitoring, authentication, security, and similar technologies to operate, secure, authenticate users, manage access to, support, troubleshoot, and improve the ViewFi Platform. These technologies may help us remember preferences, maintain sessions, improve performance, troubleshoot errors, understand how users interact with the ViewFi Platform, prevent fraud or security issues, and measure Site performance and marketing effectiveness.
On the Site, we may use third-party analytics, advertising, measurement, tag-management, and Site-optimization tools including services provided by Google, that use cookies, pixels, and similar technologies. These tools collect usage data about our Site and provide reports and metrics that help us understand Site traffic and interactions, measure conversions and marketing effectiveness, improve performance, and enhance the user experience. Learn more about how Google uses information from sites and apps that use its services at https://policies.google.com/technologies/partner-sites. You can learn about Google Analytics privacy controls and opt-out of Google Analytics measurement by using the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. These tools are not used in the patient Mobile Applications or patient portal.
Patient Mobile Applications and patient portal. We use authentication, security, payment-processing, communications, video-visit, hosting, diagnostics, application-performance monitoring, and session-replay technologies in the Mobile Applications and patient portal to provide, secure, troubleshoot, support, and improve the Services. We do not use the patient Mobile Applications or patient portal for third-party advertising or retargeting.
We do not sell your personal information, and we do not use patient information for third-party advertising or retargeting. You may control certain technologies through your browser or device settings. Some Site features may not work properly if cookies or similar technologies are disabled.
5. How We Disclose Personal Information
We may disclose personal information in the following circumstances:
- The Clinics, other healthcare providers, and care teams involved in your care, and health plans, employers, or partners through which the Services are made available to you, so they can provide, coordinate, or administer your care and the Services, in each case as permitted by applicable law and the governing arrangement.
- Service providers and contractors that help us provide, operate, secure, authenticate users, manage access, process payments, support, troubleshoot, maintain, and improve the Services, including providers of hosting, infrastructure, authentication, security, diagnostics, payment processing, address autocomplete, communications, customer support, artificial-intelligence and cloud model-hosting, and related operational services.
When a service provider receives protected health information, we require a business associate agreement or equivalent contractual obligations requiring protections at least as protective as those described in this Policy, as applicable. We permit providers to access, use, and maintain only the information reasonably needed to provide services to us and restrict use for other purposes.
- Marketing, analytics, measurement, and Site optimization providers used on the Site, for traffic and interaction analysis, conversion measurement, advertising, and related Site optimization as described in Section 4. These tools are not used in the patient Mobile Applications or patient portal.
- Professional advisors, insurers, financing sources, and transaction parties as reasonably necessary for legal, accounting, compliance, insurance, financing, diligence, corporate transactions, or similar business purposes.
- Government authorities, law enforcement, courts, or other parties when required by law or legal process, or when reasonably necessary to prevent or respond to fraud, misuse, security incidents, or threats to rights, safety, privacy, property, or security.
- Healthcare providers, government authorities, law enforcement, or other appropriate parties when permitted or required to report suspected abuse, neglect, exploitation, threats of harm, or other circumstances involving an individual protected under applicable law, or to cooperate in connection with such reports.
- With your consent or at your direction, where your parent or legal guardian provides consent where applicable, or as otherwise disclosed when the information is collected.
6. Consumer Health Data
We may collect and process information related to your health, injury, musculoskeletal condition, symptoms, pain, diagnosis, treatment, care plan, medication, telehealth appointments, medical records, providers or care team, and inferences that reveal health status. Some states treat this information as consumer health data or otherwise provide specific rights regarding it.
If you are a Washington or Nevada resident, or if your consumer health data is collected or processed in Washington or Nevada, please review our separate Consumer Health Data Privacy Policy for additional disclosures and information about applicable consumer health data rights.
We do not sell consumer health data and do not disclose consumer health data to third parties for targeted advertising. Any fees ViewFi receives are for the Services themselves and not for the sale or disclosure of consumer health data.
7. Data Retention
We retain personal information for as long as reasonably necessary to provide, administer, secure, support, and improve the Services; fulfill the purposes described in this Policy; comply with legal, accounting, reporting, contractual, or recordkeeping obligations; resolve disputes; enforce agreements; and protect our rights and the rights of others.
The applicable Clinic is responsible for maintaining the medical record created in connection with your care, including clinical documentation authored and signed by the treating healthcare provider. ViewFi may store or otherwise process medical-record information on behalf of the Clinic in providing the ViewFi Platform and related services. Medical records are retained as directed by the applicable Clinic in accordance with HIPAA, applicable state medical-record retention laws, provider obligations, and other applicable law. Requests concerning medical records may be directed or referred to the applicable Clinic or treating healthcare provider.
Audio recordings and verbatim transcripts used to generate telehealth documentation-support summaries are deleted once the summary is generated and are not retained. The resulting summary is retained as a care-team reference only for as long as reasonably necessary to support care and related operational purposes, subject to applicable legal, security, audit, and backup requirements. This summary is separate from, and does not replace or alter, the clinical documentation authored and signed by the treating healthcare provider.
You may request deletion of your personal information, request information about the personal information we hold, or withdraw a consent you previously provided by emailing support@viewfi.com. We will honor your request to the extent permitted by law. Information subject to a legal retention requirement will be retained for the required period and deleted or deidentified afterward, and we will tell you when that is the case. Withdrawing consent does not affect processing that occurred before the withdrawal and may limit our ability to provide the Services.
8. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information we maintain against unauthorized access, use, disclosure, alteration, and destruction. These safeguards may include access controls, secure authentication, encryption in transit and at rest where appropriate, monitoring, backups, personnel policies, and vendor diligence appropriate to the nature of the information and the Services. No method of transmission, storage, processing, or electronic security is completely secure. If a security incident occurs, we will respond in accordance with applicable data protection and breach-notification laws.
9. Your Privacy Choices
The choices described in this section apply to personal information that ViewFi processes under this Privacy Policy. They may not apply, or may apply differently, to protected health information or other provider-managed information processed on behalf of a healthcare provider or other customer.
- Access, correction, deletion, and accounting. You may contact us to request access to, correction of, deletion of, or an accounting regarding personal information, subject to applicable law, verification, legal exceptions, provider obligations, and retention requirements.
- Medical records. Requests for medical records may be fulfilled by, coordinated with, or referred to the applicable Clinic or treating healthcare provider. Medical-record access is subject to HIPAA, applicable state law, verification of identity and authority, and any legally permitted limitations.
- Account information. Because patient accounts are provisioned rather than created through open self-registration, contact ViewFi at support@viewfi.com for account information changes, access issues, or support.
- Communications. ViewFi does not send marketing or promotional communications to patients. We may continue to send service, transactional, legal, security, support, and account-related communications needed to provide the Services. If we send marketing communications to a business contact, you may opt out using the instructions in those communications.
- Cookies and similar technologies. You may control certain cookies and similar technologies through your browser or device settings. Some Site features may not work properly if cookies or similar technologies are disabled.
- Provider-linked information. If a provider, health plan, employer, or other partner controls or directs information, integrations, or permissions, requests may need to be directed to or coordinated with that organization.
- Parents, guardians, and authorized representatives. Where permitted by law, a parent, legal guardian, or authorized representative may submit a request on behalf of another person, subject to verification and proof of authority.
- Consent withdrawal. You may withdraw consent previously provided by contacting us at support@viewfi.com. Withdrawal does not affect prior processing and may limit the Services we can provide.
10. State Privacy Rights
Depending on where you live, the type of information involved, and how the Services are provided, applicable state privacy, medical-record, or consumer health data laws may provide you with rights regarding your personal information. To exercise an applicable right, contact us at support@viewfi.com or (404) 474-3762 to exercise those rights. We may verify your identity and authority and will respond as required by applicable law. Requests concerning medical records or provider-managed protected health information may need to be directed to the applicable Clinic or treating healthcare provider.
11. Children’s Privacy
ViewFi accepts patients beginning at age 12. Patient accounts are provisioned by ViewFi or the care team and cannot be self-created through open registration. Sign-in uses a one-time code sent to the contact information provided at intake, which for a minor patient is typically the parent’s or legal guardian’s contact information.
For patients under 18, ViewFi requires parent or legal guardian involvement as part of the care process. Consent forms require the parent or legal guardian’s name, relationship, and signature, which are stored on the patient record, and a parent or legal guardian is present for the telehealth visit where required by ViewFi’s process or applicable law.
The patient Mobile Applications use session replay and application diagnostics for patient sessions to operate, support, troubleshoot, secure, and improve the Services, without age-based distinction. The patient Mobile Applications do not use advertising tags, analytics tags, chat widgets, or marketing cookies. If we learn that we collected personal information online from a child under 13 without required parent or legal guardian involvement, consent, or other authorization, we will take reasonable steps to delete it promptly, unless retention is required or permitted by law, contract, clinical recordkeeping obligations, or a provider relationship. If you believe a child under 13 has provided information without appropriate authorization, please contact us at support@viewfi.com.
12. International Data
ViewFi is operated from the United States, and patient information is processed and stored in the United States. If you access the ViewFi Platform from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers maintain facilities. Those countries may have data-protection rules different from those in your country. We require service providers to maintain appropriate safeguards for information they process, regardless of location.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the ViewFi Platform, by email, or by other means required by applicable law. The Last Updated date above indicates when this Privacy Policy was adopted or last revised.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or if you would like to submit a privacy request, please contact us at support@viewfi.com or (404) 474-3762.