Privacy Policy
Effective Date: 2026-01-16
Last Updated: 2026-01-16
This Privacy Policy explains how Awan M.D., Inc. dba MDCareNow (“MDCareNow”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information through our website mdcarenow.org and in connection with our telehealth and asynchronous medical services (the “Service”). This Policy covers website data and Protected Health Information (“PHI”) created or received during telehealth care. By using our Service or signing our Patient Intake, Consent & Acknowledgments form, you agree to this Privacy Policy.
Contact for privacy requests
Privacy questions, HIPAA or CCPA/CPRA requests, or complaints:
Email: admin@mdcarenow.org
Mail: Awan M.D., Inc. dba MDCareNow, 1401 21st St, Suite #14317, Sacramento CA, 95811, US
To rescind arbitration: send written notice within 30 days of signing to
admin@mdcarenow.org
We will verify requests as required by law and respond within applicable timeframes.
Information we collect
We collect categories of personal information including: identifiers (name, DOB, contact details), health & clinical information (medical history, symptoms, images, clinical notes, PHI), financial & insurance information, device and usage data (IP, browser, logs), and communications (messages, audio/video where recorded). Sources include you, your device, and third-party providers (insurers, pharmacies, vendors).
How we use information
We use personal information to provide and improve the Service; deliver clinical care; communicate with you; bill and process claims; maintain medical records; and for analytics, quality assurance, and permitted marketing. PHI is used and disclosed in accordance with HIPAA and our Notice of Privacy Practices (NPP).
HIPAA & Notice of Privacy Practices
PHI created during telehealth is protected by HIPAA. Our NPP describes uses/disclosures of PHI and patient rights (access, amendment, accounting). The NPP is available at mdcarenow.org or on request via
admin@mdcarenow.org.
AI, recording, transcription, and documentation
By default, MDCareNow uses AI-assisted tools and automated systems to support clinical documentation and quality review. This may include:
- Recording and transcription of video or telephone encounters.
- Automated summarization and draft clinical note generation using AI tools.
- Automated classification, redaction, and integration into the medical record.
Your treating clinician reviews and remains responsible for the final medical record. AI outputs are used to support — not replace — clinical judgment. MDCareNow uses HIPAA-compliant vendors and commercially reasonable safeguards to protect PHI used by AI tools. If you prefer to opt out of AI-assisted processing for a specific telephone or video encounter, tell the clinician or staff verbally at the start of the encounter; we will document your preference in the record for that encounter where feasible. Opt-out requests will not prevent use of essential clinical systems required for care but will limit optional AI processing for that encounter.
Cookies, analytics, and advertising
We use cookies and similar technologies to operate the site and for analytics/advertising. Tools we may use include Google Analytics, Google Ads, and Meta Pixel. You can manage cookies via browser settings and our cookie consent banner. To opt out of ad personalization, visit Google Ads Settings and Facebook Ad Preferences. We will honor Global Privacy Control (GPC) signals where feasible.
Third parties and Business Associates
We share data with service providers who perform services for us (telehealth platforms, hosting providers, analytics, payment processors, pharmacies). These providers are contractually limited to using data only to perform services. For vendors that handle PHI, we enter Business Associate Agreements (BAAs) as required by HIPAA.
If you prefer not to publish vendor names, use our Vendor Disclosure (below) or request the current vendor list and BAA status by emailing
admin@mdcarenow.org.
CCPA / CPRA — California residents
California residents have rights to know, delete, correct, and opt-out of sale/sharing of personal information (subject to exceptions). We do not sell personal information. To exercise rights, contact
admin@mdcarenow.org.
We will verify identity and respond as required by law.
Data retention
Patient information is retained only for as long as necessary to meet applicable legal, regulatory, and contractual requirements.
Security and breach notification
We maintain commercially reasonable administrative, technical, and physical safeguards to protect personal information and PHI. No system is 100% secure; if a breach occurs, we will follow applicable HIPAA and state breach-notification laws and notify affected individuals and regulators as required.
Children
MDCareNow provides services to adults only and does not knowingly collect information from individuals under 18. If we learn we have collected such information, we will delete it promptly.
Arbitration rescission
If you signed an arbitration agreement in our Patient Intake form and wish to rescind it, send written notice within 30 days of signing to
admin@mdcarenow.org.
Rescission is effective upon receipt. Rescission applies prospectively to disputes arising after rescission and does not affect arbitrability of disputes arising prior to rescission.
Links and thirdparty sites
Our Service may link to thirdparty sites. We are not responsible for their privacy practices; review their policies before providing information.
Vendor / Business Associate Disclosure
We use third-party service providers to deliver our services, including HIPAA-compliant telehealth platforms, hosting and cloud services, analytics, payment processors, and communication vendors. We enter Business Associate Agreements (BAAs) with vendors that handle PHI as required by HIPAA. To request the current list of vendor categories, vendor names, or BAA status, email
admin@mdcarenow.org.
Changes to this policy
We may update this Privacy Policy. Material changes will be posted with a new “Last updated” date. For questions, email
admin@mdcarenow.org
