aiCare RPM Privacy Policy
Last updated: October 19, 2026 · Effective date: October 19, 2026
1. Who We Are and What This Policy Covers
AIH, LLC ("AIH", "we", "us", "our") operates the aiCare RPM mobile application for iOS and Android (the "App"). This Privacy Policy explains what information the App collects, how we use and share it, and the choices you have.
The App supports remote physiologic monitoring (RPM). We provide it on behalf of U.S. healthcare providers to patients they have enrolled in an RPM program. Only enrolled patients may use the App. The App receives readings from FDA-cleared measurement devices you use at home and sends them to your healthcare provider.
The App does not diagnose, interpret, or grade your readings, and it does not replace advice from your healthcare provider. Talk to your provider about your readings and your care. In an emergency, call 911.
This Policy applies only to the App. It does not apply to our websites or to our other products, such as apps for healthcare professionals, which have their own privacy policies. It also does not apply to third-party services we do not control, or to how your healthcare provider handles information under its own privacy practices.
When you first open the App, we ask you to read and agree to this Policy. Until you agree, the App does not collect your personal information and does not start any third-party service.
2. Our Relationship with Your Healthcare Provider
Your healthcare provider is a "covered entity" under the U.S. Health Insurance Portability and Accountability Act (HIPAA). We act as its "business associate". The health information we handle for your provider is protected health information ("PHI").
- How we handle PHI. We use and disclose PHI only as permitted by our business associate agreement ("BAA") with your provider and by law. Where this Policy and HIPAA or our BAA differ for PHI, HIPAA and the BAA control.
- Your provider's notice. Your provider's Notice of Privacy Practices describes how your PHI may be used and your rights under HIPAA. Please ask your provider for a copy.
- Requests about your PHI. Requests to access, amend, or receive an accounting of disclosures of your PHI should go to your provider. If you send one to us, we will forward it to your provider and help it respond.
3. Information We Collect
We collect only what the App needs to provide remote monitoring to you and your care team.
| Category | What we collect | Source |
|---|---|---|
| Account | Email address and password (handled by our sign-in provider; we never store your password in plain text). If you sign in with Google or Apple: the name, email address, and profile photo you allow them to share. If you use Apple's Hide My Email, we receive an Apple relay address instead of your real email. | You; Google; Apple |
| Profile | Name, gender, date of birth, height, weight, profile photo, time zone | You |
| Health readings | Blood pressure (systolic, diastolic, pulse rate); blood oxygen (SpO2, pulse rate); body temperature; blood glucose (level and meal timing); body weight; the date and time of each reading; and which device produced it | Your FDA-cleared devices |
| Device information | Bluetooth address, serial number, model, and name of each device you pair | Your devices |
| Messages | Text messages you exchange with your care team in the App | You; your care team |
| Reminders | Measurement reminder times you set (stored only on your phone) | You |
| Notification token | A token that lets our servers send notifications to your phone | Your phone |
| Technical data | App version, device model, operating system, language, and error and crash information, sent to our own servers | Automatically |
We do not collect your precise location, contacts, microphone audio, or advertising identifiers. The App contains no advertising. Camera and photo access is used only when you choose a profile photo, and only the photo you select is uploaded.
4. How We Use Information
We use information only to provide the RPM service and to run the App safely:
- Deliver RPM to your provider: receive readings from your devices and send them to your healthcare provider, who reviews and analyzes them.
- Help your provider keep monitoring on track: record on which days readings were received, and let your provider know when none arrive, so your care team can contact you.
- Support your provider's RPM documentation: give your provider records of your device setup, measurement days, and communications that it needs to document and bill RPM services. Your provider, not us, submits claims to your insurer.
- Show your history: display your readings and measurement calendar in the App, exactly as your devices reported them.
- Communicate: deliver messages between you and your care team, and send notifications and the reminders you schedule.
- Operate and secure the App: sign you in, prevent misuse, diagnose errors and crashes, and improve reliability.
- Comply with law: meet legal, regulatory, and recordkeeping obligations.
All clinical review, analysis, and decisions about your care are made by your healthcare provider. We do not sell your information. We do not use or disclose your health information for advertising or marketing. We do not de-identify your information for any purpose other than providing the RPM service, and we do not attempt to re-identify de-identified information.
5. Notifications
The App sends measurement reminders you schedule, and may send notifications about new messages or other updates. Notifications never contain your health information, such as readings, conditions, or the name of your provider. Open the App and sign in to see details. You can turn notifications off at any time in your phone's settings.
6. Device Permissions
The App asks for a permission only when a feature needs it. You can change permissions at any time in your phone's settings; turning one off disables only the related feature.
| Permission | Why the App asks |
|---|---|
| Bluetooth | Find, pair, and receive readings from your measurement devices |
| Location (Android only) | Some Android versions require it to scan for Bluetooth devices. The App does not collect, store, or share your location |
| Camera and photos | Take or choose a profile photo, only when you start that action |
| Notifications and alarms | Deliver notifications and the reminders you set, including after your phone restarts |
The App does not start measurements. You take a measurement on the device itself, and the App receives the result over Bluetooth. Some devices store readings taken while the App was closed; the App retrieves them at the next connection and keeps their original measurement time.
7. How We Share Information
We share information only as described below. We never sell it.
Your healthcare provider. Your readings, profile, device records, and messages are available to the healthcare provider that enrolled you and its care team.
Service providers. We use a small number of vendors to run the App. They may use information only to provide their services to us, and they must protect it at least as well as we do. Vendors that handle PHI sign a BAA with us.
| Service provider | Purpose | Information involved |
|---|---|---|
| Amazon Web Services, Inc. | Hosting our servers and database in the United States | All App data |
| Okta, Inc. (Auth0) | Sign-in and account security | Email address, sign-in credentials |
| Google LLC | Optional Sign in with Google; delivering notifications to Android phones | Information you allow Google to share at sign-in; notification token. Notification content contains no health information |
| Apple Inc. | Optional Sign in with Apple; delivering notifications to iPhones | Information you allow Apple to share at sign-in; notification token. Notification content contains no health information |
Third-party software in the App. The App includes the following third-party software development kits (SDKs):
| SDK | Provider | Purpose | Information it processes |
|---|---|---|---|
| Auth0 SDK | Okta, Inc. | Sign-up and sign-in, including Sign in with Google, which is completed through Auth0 in your browser | Email address, sign-in credentials, device model, operating system version; sent to Okta |
| Sign in with Apple | Apple Inc. | Optional sign-in with Apple | Name and email address you allow Apple to share |
| Firebase Cloud Messaging | Google LLC | Delivering notifications to Android phones | Notification token; notification content contains no health information |
| AOJ device SDK | Shenzhen AOJ Medical Technology Co., Ltd. | Connecting to blood pressure monitors, pulse oximeters, and thermometers over Bluetooth | Readings, processed only on your phone; nothing is sent to the manufacturer |
| PPBluetoothKit | Shenzhen Lefu Scale Co., Ltd. | Connecting to weight scales over Bluetooth | Weight readings, processed only on your phone; nothing is sent to the manufacturer |
The App also uses open-source libraries that run only on your phone, for example for Bluetooth communication, choosing a photo, local reminders, and charts. They do not send information to third parties. On iPhones, notifications are delivered by Apple's push notification service, which is part of iOS.
Legal requirements. We may disclose information when required by law, such as in response to a subpoena or court order, or when HIPAA otherwise permits, for example to the U.S. Department of Health and Human Services.
Business transfers. If AIH is involved in a merger, acquisition, or sale of assets, information may be transferred to the successor. It will remain subject to this Policy, our BAAs, and the law.
With your authorization. We share information for any other purpose only with your written authorization.
8. Texas Notice of Electronic Disclosure
Under Texas law, we notify you that your protected health information is subject to electronic disclosure. We disclose it electronically to your healthcare provider and to our service providers as described in this Policy, and otherwise only as permitted by our BAA and by state and federal law. We do not disclose your protected health information in exchange for payment, we do not use it for marketing without your permission, and we do not re-identify de-identified information.
9. Where Your Information Is Stored
Your information is stored on Amazon Web Services servers in the United States. Only our authorized personnel in the United States operate and maintain the systems that hold it; we do not permit access to this data from outside the United States.
Your weight scale calculates weight on the device itself. The App does not send your readings to device manufacturers or other device vendors.
10. How Long We Keep Information
| Information | How long we keep it |
|---|---|
| Health readings, profile, device records, messages (PHI) | While you are enrolled and your account is active. After you delete your account, or when our agreement with your provider ends, we return the PHI to your provider or destroy it, as our BAA requires. If your provider or the law requires the records to be kept (for example, for Medicare documentation), we keep them as your provider directs, generally up to 7 years from the date of service, and then destroy them. |
| Account and sign-in data | While your account is active; deleted within 15 working days after you delete your account |
| Technical and error logs | Up to 2 years |
| Data on your phone | Until you sign out or uninstall the App |
Your healthcare provider may also keep your readings in its own medical records under its own retention rules.
11. Corrections
Readings come directly from your devices and cannot be edited or deleted in the App, so your care team always sees the original record. If you believe a reading is wrong, contact your provider or us. A correction is added as a new note; the original reading is not changed.
12. Deleting Your Account
You can delete your aiCare RPM account in either of two ways:
- In the App: go to Me > Account Security > Delete Account.
- By email, without the App: email info@aihnet.com from the email address on your account, with the subject "Delete my aiCare RPM account". We will verify your identity and complete your request within 15 working days.
When your account is deleted, you are signed out, your account and sign-in data are deleted, and your profile is removed from the App. A deleted account cannot be restored. Health records that your provider or the law requires to be kept are handled as described in Section 10. AIH, LLC operates aiCare RPM and handles these requests.
13. Security
We use administrative, technical, and physical safeguards to protect your information, including:
- encryption of all communication between the App and our servers;
- encryption of information stored on our servers;
- encryption of health information and sign-in credentials stored on your phone, with credentials kept in the iOS Keychain or Android Keystore, and removal of this data when you sign out;
- access limited to authorized personnel who need it, and privacy and security training for our staff.
No method of transmission or storage is completely secure. If we discover a breach involving your health information, we will promptly notify your healthcare provider as HIPAA and Texas law require, and we will support your provider in notifying you and the appropriate authorities.
14. Your Choices and Rights
- Your HIPAA rights. For PHI, your rights to access, amend, and receive an accounting of disclosures, and to request restrictions or confidential communications, are described in your provider's Notice of Privacy Practices. Send these requests to your provider; we will help it respond.
- Other information. You may ask us for access to, correction of, or deletion of other information we hold about you, such as your account and technical data.
- Withdrawing consent. You can turn off permissions in your phone's settings, or withdraw your agreement to this Policy by deleting your account (Section 12). Withdrawal does not affect processing that took place before it.
- No sale or targeted advertising. We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of. If we receive an opt-out preference signal, such as Global Privacy Control, we will honor it as applicable law requires.
How to make a request. Email info@aihnet.com or call 1-800-713-8519. We will verify your identity and respond within 15 working days. An authorized agent may make a request for you with proof of authorization.
Complaints. If you have a concern about how your information is handled, contact us or your provider. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.
15. Children and Teens
Patients under 18 may use the App only if a parent or legal guardian enrolls them through their healthcare provider and agrees on their behalf. For patients under 13, the parent or guardian creates and manages the account. Patients aged 13 to 17 sign in and use the App themselves, with their parent's or guardian's consent.
A parent or guardian who is the patient's personal representative may exercise the patient's rights, except where state law gives a minor control over certain health information. When a patient turns 18, control of the account passes to the patient.
We do not knowingly collect personal information from a child under 13 without verifiable parental consent. If we learn that we have, we will delete it.
16. Changes to This Policy
We may update this Policy from time to time. We will post the new version in the App and at the address below, and update the dates at the top. Before a material change takes effect, we will show you the updated Policy when you next open the App and ask for your agreement again. Material changes include changes to:
- the types of information we collect, or why we use it;
- the service providers listed in Section 7;
- how you exercise your rights;
- our contact details.
17. Contact Us
If you have questions about this Policy or wish to exercise your rights, contact us:
- AIH, LLC
- 7601 W Sam Houston Pkwy S, Unit 350, Houston, TX 77072, United States
- Phone: 1-800-713-8519
- Email: info@aihnet.com
- Website: aihnet.com
This Policy is published at aihnet.com/privacy-policy-aicare-rpm and in the App.