MyCHOIS Privacy Statement

Thank you for visiting the My Collaborative Health Outcomes Information System (MyCHOIS) for mobile devices developed by the NYS Office of Mental Health. This App is designed to help NYS consumers manage and track their health information and view other recovery-oriented tools. As used herein, "we" refers to NYS OMH and the software developers with whom it contracts to provide the App.

NYS OMH is committed to ensuring the confidentiality of your information. This privacy statement describes what NYS OMH may gather, use or disclose information about you and governs your use of the MyCHOIS App. Please read this document carefully before you access and use the App.

This privacy statement applies to:

• Information we collect about you in the MyCHOIS App
• How we use the information
• Choices you have about how we collect and use your information

This privacy statement does not apply to:

• Privacy practices associated with any activities done outside of your use of this App
• Products and services not available or enabled through this App

Information We Collect in the NYS OMH MyCHOIS Application

You provide personal information voluntarily when you submit verification documentation through the MyCHOIS Application. "Personal information" refers to personally identifiable information such as name, address, date of birth, and/or social security number, which alone, or when combined, may be used to identify you. The personal information that MyCHOIS collects is used only for authorized purposes. MyCHOIS will ask that you provide the following personal information:

• First and Last Name
• Email Address

MyCHOIS will ask that you provide additional personal information to verify your identity that may include:

• Date of Birth
• Phone Number
• Address

The personal information volunteered by you when you register to use the MyCHOIS Application is used by NYS OMH to process your account.

MyCHOIS safeguards the personal information it receives with operational, administrative, technical, and physical safeguards to prevent unauthorized or inappropriate access, use, or disclosure. Policies to protect the confidentiality of personal information are based on applicable federal and state law.

How We Use and Disclose the Information

MyCHOIS uses personal information it receives from registrants for reasons including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information

The collection of information through the MyCHOIS App and the disclosure of that information are subject to applicable law, including the Health Insurance Portability and Accountability Act (HIPAA).To Learn more about Health Information Privacy, visit HIPAA for Individuals | HHS.gov

MyCHOIS does not share or sell your personal information with unaffiliated third parties.

Application Time Out

For security purposes, your session is set to end after 10 minutes of user inactivity. When you are actively using the Application, you will receive a session timeout warning after 10 minutes of inactivity, allowing you to either continue your session or logout. If you do not make a selection, your session will end. If the Application is running in the background, you will be logged out after 10 minutes of inactivity.

Information We Retain

We retain information your personal information provided voluntarily when you submit verification documentation through the MyCHOIS Application. This information is retained for the duration of the login session and is transmitted via API and retained for 15 minutes.

Location Data

This Application does not collect geolocation information.

Security

MyCHOIS safeguards the personal information it receives with operational, administrative, technical, and physical safeguards to prevent unauthorized or inappropriate access, use, or disclosure. Policies to protect the confidentiality of personal information are based on applicable federal and state law.

To protect users connecting to the App, security controls include authentication of the client mobile application, encryption, as well as monitoring and auditing.

As part of our continuing commitment to protect information these safeguards are in place, however, no application or system is totally secure.

Children

We are committed to complying with the Children's Online Privacy Protection Act. Although parents are free to use this mobile Application on behalf of their children, this Application is not meant for use by children under 18 years of age.

Reviewing & Updating Your Personal Information

You can provide and update your personal information in the “about me” section of MyCHOIS web application

Changes to this Privacy Statement

We will occasionally update this privacy statement. When we do, we will revise the "effective date" at the top of the privacy statement. Your continued use of the Application after we have notified you of changes as described above constitutes your acceptance of the changes.

How to Contact Us

If you have any questions or concerns about reviewing and correcting your MyCHOIS information, please contact the PSYCKES Team.