Health information privacy

Last updated: October 28, 2026

Slim Path Solutions respects the privacy of your health information. This page explains how HIPAA relates to our services, summarizes patient privacy rights, and explains where to direct questions and requests.

1. Our role and your provider’s privacy notice

Slim Path Solutions helps patients access telehealth services and provides administrative support. Medical care is provided by licensed healthcare professionals. The healthcare provider responsible for your care maintains its own Notice of Privacy Practices, which explains its legal duties and how it uses and discloses protected health information.

This page supplements our Privacy Policy. It does not replace the Notice of Privacy Practices issued by your treating provider. Please review the provider’s notice supplied during enrollment or treatment, or request a copy through the Patient Portal.

2. Protected health information

HIPAA is the Health Insurance Portability and Accountability Act of 1996. Its Privacy Rule protects individually identifiable health information held by covered entities and their business associates. This information is commonly called protected health information, or PHI.

Depending on the service, health information may include identifying and contact information linked to your care, intake responses, medical history, medications, allergies, test results, consultation records, treatment plans, and healthcare billing records. HIPAA does not apply to every item of information collected by every website. Our Privacy Policy also explains how information collected through this website is handled.

3. Uses and disclosures of health information

Subject to applicable law and the responsible provider’s privacy notice, PHI may be used or disclosed for:

  • Treatment: providing care and coordinating with healthcare professionals, pharmacies, or laboratories involved in your care.
  • Payment: billing for healthcare services and processing related payment activities.
  • Healthcare operations: activities such as quality assessment, training, audits, and administration.
  • Other legally permitted or required purposes: certain public health activities, oversight, legal proceedings, and other circumstances allowed by law, subject to applicable conditions.

Organizations that handle PHI on behalf of a covered entity are subject to applicable HIPAA business associate requirements. Uses or disclosures that require your written authorization must be supported by that authorization. You may revoke an authorization in writing, except to the extent action has already been taken in reliance on it. Additional protections may apply to certain types of records.

4. Your privacy rights

Where HIPAA applies, you generally have the right to:

  • Request access to and a copy of your health and billing records.
  • Ask for an amendment if you believe information is inaccurate or incomplete.
  • Request confidential communications through a reasonable alternative method or location.
  • Ask for restrictions on certain uses and disclosures. Some requests need not be accepted; special rules apply to certain services paid in full out of pocket.
  • Request an accounting of certain disclosures.
  • Obtain a paper copy of the responsible provider’s Notice of Privacy Practices.
  • Have an authorized personal representative act on your behalf, where permitted by law.
  • File a privacy complaint without retaliation.

These rights have legal conditions and exceptions. Contact the provider that maintains your records to exercise them. Its privacy notice explains the request process, response timeframes, and any permitted fees. If you need help locating the appropriate contact, contact Slim Path Solutions using the details below.

5. Security, breach notifications, and record retention

HIPAA-regulated organizations must apply appropriate administrative, physical, and technical safeguards to electronic PHI. When a breach of unsecured PHI requires notification, the responsible organization must provide the notices required by applicable law.

Record retention requirements depend on the record, the responsible organization, and applicable federal and state law. Contact your treating provider for information about the retention of your medical records.

Use the Patient Portal for clinical messages and sensitive documents. Please do not send medical records, passwords, or other sensitive details in an initial general email inquiry.

6. Questions, requests, and complaints

For help directing a health information privacy request, contact Slim Path Solutions and ask for the person responsible for privacy requests:

Slim Path Solutions — Privacy Requests
Email: info@slimpathsolutions.com
Phone: +1 888-390-8834
Mail: 3410 Healy Dr STE. 202, Winston-Salem, NC 27103, United States

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. HIPAA prohibits retaliation for exercising protected rights or filing a complaint.

7. Updates and further information

Updates to this page will be identified by the date above. Your provider’s current Notice of Privacy Practices governs its clinical privacy practices. For more information, see HHS information for individuals and our Privacy Policy.