Highland HomePrivacy Policy
Effective October 15, 2026
Highland Home is the patient app of your clinic ("we", "us"). This policy explains what the app collects, why, who it is shared with, and the choices you have. Your health information is also protected by HIPAA and by our Notice of Privacy Practices, which you received at the clinic and can ask for at any time.
What the app collects
- From your clinic record: your name, date of birth, phone, email, your appointments and your care plan, so the app can show your visits and program.
- Your account: your sign-in email and password (stored only as a one-way scrambled "hash"). If you turn on Face ID, your face never leaves your phone; we only keep a security key your phone creates.
- What you do in the app: exercises you check off, programs you open, your climb and badges, game scores, appointments you schedule, move or cancel, waitlist spots, family members you link, notes you send your care team, and survey answers.
- How the app is used: which screens are opened and buttons tapped, and the type of device, so we can see what helps patients and fix what doesn't. This stays in our own system; we do not use Google Analytics or any advertising tracker.
- Notifications: if you allow them, a token your phone gives us so we can send reminders and replies.
The app does not collect your location, contacts, photos or microphone, and it does not store payment card numbers.
How we use it
- To provide your care: your visits, exercises, programs, messages and surveys.
- To schedule, move or cancel appointments, and to send reminders and openings you asked for.
- To run rewards, referral credits and the climb.
- To keep your account secure and to improve the app.
We never sell your information and never use it for advertising.
Who we share it with
Only with companies that help us run the app, each bound by a HIPAA Business Associate Agreement or equivalent protections, and only for that purpose:
- Amazon Web Services hosts the app and its database, and sends our emails.
- Our practice-management system (where your clinic record lives) receives the appointments you schedule or change.
- Apple and Google deliver phone notifications. Notification text is kept general (for example, "Your Highland Team answered"); the details stay inside the app.
We may also share information when the law requires it, as described in our Notice of Privacy Practices.
Security
Information is encrypted when it travels and when it is stored. The app locks itself after 15 minutes away and asks for Face ID or your password. Staff access is limited to the people who need it for your care.
Family accounts
A parent or guardian can link their children and manage the children's visits and app access. Children do not create their own accounts. Linked adults (for example, spouses) only see each other's details if each of them allows it.
Keeping and deleting your information
You can delete your app account at any time in Me › Account › Delete my account. That removes your sign-in, Face ID, notifications, app activity, climb, badges, game scores and family links. Your chiropractic records, messages with your care team, survey answers and appointment history are part of your health record, which we are required by law to keep; they stay with the clinic and are protected by HIPAA.
Your rights
You may ask to see or get a copy of your health record, ask us to correct it, or ask who we have shared it with. Contact the clinic below.
Changes
If we change this policy, we will update the date above and let you know in the app when the change matters.