Last Updated: 03/24/2026
This Consumer Health Data Privacy Policy describes how Veevo Technologies, Inc., doing business as Veevo Health ("Veevo," "we," "our") collects, uses, shares, and protects consumer health data as defined by applicable U.S. state laws, including the Washington My Health My Data Act (RCW 19.373), the Connecticut Data Privacy Act, Nevada privacy law, and other state consumer health data statutes.
This policy supplements our Privacy Policy. Where this policy conflicts with the Privacy Policy, this policy controls with respect to consumer health data.
1. Consumer Health Data We Collect
We collect the following categories of consumer health data:
- Health history and risk factors provided on intake forms
- Blood test results you upload to the platform
- Diagnostic imaging reports and imaging data received from imaging centers and Affiliated Providers with your authorization
- Laboratory results
- Self-reported health data: weight, blood pressure, blood sugar, diet, and other metrics you log
- Wearable and connected device data: heart rate, steps, activity, sleep, and other data synced from Apple Health, Google Health Connect, or other compatible devices
- Health-related questions, photos, documents, and files you share with Viva (our AI health assistant)
- Information about health services you request through our platform
2. Sources of Consumer Health Data
- Directly from you: When you create an account, complete intake forms, upload health data, log metrics, connect wearable devices, or interact with Viva
- Wearable devices and connected apps: Apple Health, Google Health Connect, and other devices you choose to connect
- Affiliated Providers: Independent licensed physicians who share diagnostic results and clinical notes with your authorization
- Imaging centers and laboratories: Diagnostic imaging reports, imaging data, and laboratory results received with your authorization
3. Purposes for Collection and Use
We collect and use your consumer health data for the following purposes:
- Providing personalized wellness insights and educational content
- Facilitating preventive health screening services (clinical evaluation, imaging coordination, results delivery)
- Powering Viva, our AI health assistant
- Displaying your health data and results on the platform for your access
- Communicating with you about your services and results
- Using de-identified and aggregated data for research and product development (see our Data De-Identification Policy)
- Complying with legal obligations
4. How We Share Consumer Health Data
We share your consumer health data only in the following limited circumstances:
- Affiliated Providers (independent licensed physicians) for clinical evaluations
- Imaging centers and laboratories to facilitate services you request
- AI service providers to power Viva (contractually prohibited from using your data for their own purposes)
- Service providers who assist with platform operations (cloud hosting, analytics, customer support), bound by data protection agreements
- As you direct (e.g., sharing results with your personal physician)
- As required by law
We do not sell your consumer health data. We will not sell your consumer health data without your signed, written authorization specifying the data, purpose, recipients, and scope.
5. Consent
We collect and share your consumer health data only with your affirmative consent, which you provide when you:
- Create your account and agree to our Terms of Use
- Complete and submit an intake form for screening services
- Upload health data (blood test results, health records)
- Connect wearable devices
- Interact with Viva
Withdrawal of consent: You may withdraw your consent to the collection and sharing of your consumer health data at any time by contacting us at privacy@veevo.health. Withdrawal may affect our ability to provide services. Withdrawal does not apply to data already collected or actions already taken in reliance on your prior consent.
6. Geofencing
We do not use geofencing technology within 2,000 feet of any healthcare facility to collect, infer, or identify consumers seeking healthcare services. We do not use GPS, cell tower, Wi-Fi, Bluetooth, or other location technologies to track or identify individuals entering or near any medical facility.
7. Your Rights
If you are a resident of a state with consumer health data protections, you have the following rights:
- Right to confirm: Confirm whether we collect your consumer health data
- Right to access: Request access to the consumer health data we have collected about you
- Right to deletion: Request deletion of your consumer health data, subject to legal retention obligations
- Right to withdraw consent: Withdraw your consent to the collection and sharing of your consumer health data at any time
- Right to appeal: Appeal a denial of your request
- Right to non-discrimination: We will not discriminate against you for exercising your rights
Response timeline: We will respond to your requests within 45 calendar days of receipt. If we need additional time, we will notify you of the extension and the reason.
How to exercise your rights: Contact us at privacy@veevo.health or by mail at the address below.
8. Data Security
We implement administrative, technical, and physical safeguards to protect your consumer health data, including encryption in transit and at rest. For details, see Section 6 of our Privacy Policy.
9. Breach Notification
In the event of a breach involving your consumer health data, we will notify you in accordance with applicable law, including the FTC Health Breach Notification Rule (16 C.F.R. Part 318) and state consumer health data privacy laws. For details on our breach procedures, see our Breach Notification Policy.
10. Contact Us
Veevo Technologies, Inc. d/b/a Veevo Health
- Privacy Officer: Arvind Srivastav
- Email: privacy@veevo.health
- Mail: Veevo Technologies, Inc., Attn: Privacy Officer, 601 Van Ness Ave, San Francisco, CA 94102