HIPAA

WatchMyVitals is offered to facilities as a business associate. The product handles PHI; this marketing site does not. Keeping the two apart is deliberate — a public website is the wrong place for patient data, so it never touches any.

A signed business associate agreement comes first. Until one is in place, we do not receive, store or process PHI on your behalf, and a demonstration runs on sample data rather than your residents’.

If you would like to review our BAA before a demo, ask and we will send it — it is a reasonable thing to read first, and we would rather you did.

• The interactive walkthrough on this site: fictional residents, generated in your browser.
• A live demo call: a sample facility, not yours.
• A trial in your facility: your residents, under a signed BAA, with access limited to the staff you nominate.

If you believe resident information has been sent to us in error — by email, through a form, or in a chat — tell us at vitaleyehealth@gmail.com and we will remove it and confirm when it is gone. Tell us even if you are not sure; it is a much smaller problem when it is raised early.

It is a description of how we work, not a certification. HIPAA has no government certification scheme, and any vendor claiming to hold one is worth a second look. The specifics that matter to your compliance officer — safeguards, subcontractors, breach notification timelines, audit rights — belong in the BAA and the security documentation, which we will provide on request rather than summarise here.