Consumer Health Data Privacy Notice

How we handle your health-related information.

Last updated: April 2026

This notice describes how Eli Health (operated by Lifetime Redesign OT, PLLC) collects, uses, shares, and protects consumer health data under laws including the Washington My Health My Data Act (MHMDA), the California Consumer Privacy Act/CPRA (CCPA) as amended to cover sensitive personal information, the New York Health Information Privacy Act, and comparable laws in other states. It supplements — and in the event of conflict regarding consumer health data, controls over — our general privacy policy.

What counts as consumer health data

Consumer health data means any information that identifies a consumer’s past, present, or future physical or mental health status. On this page, this can include:

  • Information that your loved one has a dementia diagnosis or is suspected of having one.
  • Information that your loved one is covered by Medicare Parts A and B, Medicare Advantage, or is receiving hospice care, skilled nursing care, or another care setting.
  • Your contact details when combined with the health-related context above.

Categories of sources

We collect consumer health data from a single source: directly from you, through the voluntary eligibility form on this site. We do not collect it through advertising pixels, cookies, or third-party data brokers.

Categories of third parties and affiliates who receive it

We share consumer health data only with the following categories of recipients, each under a written agreement restricting use to the purposes described:

  • Eli Health’s HIPAA-covered clinical team — to contact you, confirm eligibility, and deliver care if you enroll.
  • Technical service providers — our hosting provider (Vercel), database provider (Supabase), and transactional email provider (Resend) operate as data processors under written agreements. They store and transmit the data; they do not use it for any other purpose.
  • No advertising networks. We do not transmit consumer health data to Meta, Google, TikTok, LinkedIn, or any other advertising network.

How we use it

  • To determine whether your loved one may be eligible for the CMS GUIDE Model.
  • To contact you about eligibility and next steps under the GUIDE Model.
  • To route your inquiry to Eli Health’s HIPAA-covered clinical team for clinical follow-up, if you proceed.

We do not sell your consumer health data. We do not share it with advertising networks such as Meta, Google, TikTok, or LinkedIn. We do not use it to build or enrich advertising audiences.

How long we keep your consumer health data

We retain the consumer health data you submit for up to 24 monthsfrom the date you submit the eligibility form, or until you request deletion — whichever comes first. If you enroll in the CMS GUIDE Model through Eli Health, clinical records generated during enrollment are retained per CMS Participation Agreement §15.02 (minimum 10 years) in a HIPAA-covered system, separate from the pre-enrollment lead record covered by this notice. Revocation requests shorten the retention period per the SLA below.

Consent, revocation, and your rights

By submitting the eligibility form, you provide affirmative opt-in consent to the uses above. You may revoke consent at any time by emailing info@elihealth.com. Washington residents: we honor revocation requests within 15 days of receipt, as required by RCW 19.373.050. Other jurisdictions: as soon as practicable and no later than required by applicable law.

You have the right to:

  • Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data.
  • Have your consumer health data deleted.
  • Withdraw consent to the processing of your data.
  • Appeal any denial of these requests. If we deny a request, you may contact your state attorney general’s office.

Washington residents — MHMDA specifics

If you are a Washington resident, Washington’s My Health My Data Act grants you an opt-in-based regime, the right to a private cause of action for violations, and the right to a dedicated consumer health data privacy policy (this notice). Washington residents who believe their rights have been violated may contact the Washington State Attorney General.

Data minimization

On this page we do notcollect the Medicare Beneficiary Identifier (MBI), Social Security Number, or date of birth. Those are collected later by Eli Health’s clinical team under HIPAA, during the formal enrollment process, only if you proceed.

Security

Submissions are transmitted over HTTPS, validated server-side, and stored in systems that are subject to Eli Health’s HIPAA safeguards. Access is limited to personnel who need it to respond to your inquiry.

Contact

Questions or requests: info@elihealth.com. General inquiries: (855) 918-6048.