Privacy Policy

Scope

This policy covers information collected through www.onetreemedical.org and through care delivered by One Tree Medical. Protected health information (PHI) created or received in the course of treatment is additionally governed by the Health Insurance Portability and Accountability Act (HIPAA) and by our Notice of Privacy Practices, which is provided to every patient.

Information we collect

From website visitors: basic technical information such as pages requested, which is used to keep the site running.

From patients: the information you provide at intake and during care — identity and contact details, medical and medication history, allergies, and clinical information generated during treatment.

How we use information

We use your information to provide and coordinate care, to transmit prescriptions to the pharmacy you choose, to meet legal and regulatory obligations, and to operate the practice.

We do not sell your data. We do not use your data for advertising.

How we use AI, and what it never does

A physician makes every clinical decision. AI assists with documentation, with surfacing patterns across your record, and with safety cross-checks. It never diagnoses, never prescribes, and never decides.

Every AI output is reviewed by your physician before it enters your medical record, with an audit trail.

Where PHI is processed by an AI provider, that provider operates under a HIPAA Business Associate Agreement on zero-data-retention terms: your data is not retained by the provider and is never used to train any model.

Electronic prescribing

When your physician sends a prescription, the information necessary to fill it is transmitted through a certified electronic prescribing network to the pharmacy you select. For controlled substances, applicable state prescription drug monitoring programs are consulted as required by law.

When we share information

We share information with the pharmacy you choose, with laboratories and clinicians involved in your care, with service providers bound by a Business Associate Agreement, and where required by law. We do not share your information for any other purpose without your authorization.

How we protect information

Information is encrypted in transit and at rest, access is limited to those who need it to do their work, and access is logged. The site uses no third-party advertising trackers.

Your rights

You have the right to access your records, to request corrections, to request restrictions on certain uses, and to receive an accounting of disclosures. Patients receive all of their medical records; that is a commitment of this practice, not merely a legal minimum.

California residents have additional rights under California law, including rights regarding medical information under the Confidentiality of Medical Information Act.

Retention

Medical records are retained for the period required by California law and professional standards.

Contact

Privacy questions and requests can be sent to info@onetreemedical.org.