{"platform":"HealthSpark","slug":"healthspark","category":"Workflow & Automation","website":"https://joinhealthspark.com","risk_rating":"low","verification":"partially_verified","verification_detail":{"tier":"partially_verified","partial_reason_code":"missing_terms","partial_reason_label":"Terms not yet captured","blocked_core_documents":[]},"rating":{"value":"low","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_partial","canonical":"https://airinetwork.com/platform/healthspark","machine_url":"https://airinetwork.com/api/machine/platform/healthspark","last_reviewed":"2026-07-20","findings_count":7,"findings":[{"id":"privacy-data-use-bab5f63b5727742a9349","permalink":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-bab5f63b5727742a9349","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" This Notice of Privacy Practices (\"Notice\") explains how HealthSpark Inc., HealthSpark Medical Group West PC, HealthSpark Medical Group PA (including its assumed name, HealthSpark Medical Group PC), and their licensed clinicians and business partners (collectively, \"HealthSpark,\" \"we,\" \"our,\" or \"us\") may use and disclose your protected health information (PHI) to provide treatment, obtain payment, and conduct health‑care operations, as well as other uses permitted or required by law.\n It also describes your rights to access and control your PHI.\n HealthSpark operates as an organized health‑care arrangement. All covered entities and workforce members within HealthSpark agree to follow the terms of this Notice and may share PHI with one another for treatment, payment, and health‑care‑operations purposes. This Notice applies to the technology-enabled and in-person physical therapy services provided by HealthSpark.","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20This%20Notice%20of,services%20provided%20by%20HealthSpark.","structural_citation":"Privacy Policy › “PLEASE READ THIS NOTICE CAREFULLY”","citation_basis":"heading_path","char_start":189,"char_end":1115,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}},{"id":"privacy-data-use-1dee4b7778763774db08","permalink":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-1dee4b7778763774db08","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Privacy & Security. We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy and security of your PHI.\n Notice. We must give you this Notice and follow the terms currently in effect.\n Breach Notification. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.\n Changes to This Notice. We may change this Notice at any time. Revised Notices apply to all PHI we maintain and will be posted on our website and made available upon request.\n Where any other state law provides greater privacy protection than HIPAA, we will follow that state law.","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20Privacy%20%26%20Security.,follow%20that%20state%20law.","structural_citation":"Privacy Policy › “Our Legal Duties”","citation_basis":"heading_path","char_start":1142,"char_end":1797,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}},{"id":"privacy-data-use-619c72a7fd47ec24652b","permalink":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-619c72a7fd47ec24652b","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We sometimes rely on third-party service providers—such as secure cloud-hosting platforms, claims-clearinghouses, electronic-prescription networks, telehealth infrastructure vendors, and analytics partners—to support our treatment, payment, and health-care-operations activities. These companies, known under HIPAA as Business Associates, may receive, create, or maintain your protected health information on our behalf only after signing a Business Associate Agreement (BAA) that contractually requires them to: (a) use or disclose PHI solely as permitted by us or as required by law; (b) implement appropriate administrative, physical, and technical safeguards to protect the information; (c) report any suspected or confirmed privacy or security breach to HealthSpark without unreasonable delay; and (d) ensure that any of their subcontractors who handle PHI are bound by the same protections. We share the minimum necessary information for them to perform their duties, and we monitor their compliance as part of our ongoing privacy-and-security program.\n We may also use and disclose your health information to:\n Comply with federal, state or local laws that require disclosure.\n Assist in public health activities such as tracking diseases or medical devices.\n Inform authorities to protect victims of abuse or neglect.\n Comply with federal and state health oversight activities such as fraud investigations.\n Respond to law enforcement officials or to judicial orders, subpoenas or other processes.\n","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20We%20sometimes%20rely,or%20other%20processes.%20","structural_citation":"Privacy Policy › “Business Associates”","citation_basis":"heading_path","char_start":4657,"char_end":6164,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}},{"id":"privacy-data-use-015c51f04f6d06c066cb","permalink":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-015c51f04f6d06c066cb","surface":"privacy_data_use","risk":"medium","confidence":"high","tier":"All","verified":true,"quote":" Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties.\n Facilitate organ and tissue donation or procurement.\n Conduct research following internal review protocols to ensure the balancing of privacy and research needs.\n Avert a serious threat to health or safety.\n Assist in specialized government functions such as national security, intelligence and protective services.\n Inform military and veteran authorities if you are an armed forces member (active or reserve).\n Inform a correctional institution if you are an inmate.\n Inform workers' compensation carriers or your employer if you are injured at work.\n Recommend treatment alternatives.\n Tell you about health-related products and services.\n Communicate within our organization for treatment, payment, or healthcare operations.\n Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment and improvement, care coordination and the qualifications and training of healthcare professionals.\n Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information.\n We may also use or disclose your personal or health information for operational purposes. ","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20Inform%20coroners%2C%20medical,for%20operational%20purposes.%20","structural_citation":"Privacy Policy › “Business Associates”","citation_basis":"heading_path","char_start":6164,"char_end":7647,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}},{"id":"privacy-data-use-09c69cb149dac9b43d12","permalink":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-09c69cb149dac9b43d12","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":"For example, we may communicate with individuals involved in your care or payment for that care, such as family or guardians and send appointment reminders.\n All other uses and disclosures, not previously described, may only be done with your written authorization. We will also obtain your authorization before we:\n Use or disclose your health information for marketing purposes;","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=For%20example%2C%20we%20may,information%20for%20marketing%20purposes%3B","structural_citation":"Privacy Policy › “Business Associates”","citation_basis":"heading_path","char_start":7647,"char_end":8027,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}},{"id":"moderation-enforcement-9f3ce0027a06f9942570","permalink":"https://airinetwork.com/platform/healthspark/finding/moderation-enforcement-9f3ce0027a06f9942570","surface":"moderation_enforcement","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights:","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20You%20may%20also,Office%20for%20Civil%20Rights%3A","structural_citation":"Privacy Policy › “San Francisco, CA 94103”","citation_basis":"heading_path","char_start":9113,"char_end":9221,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}},{"id":"audit-rights-dpa-residency-313e9dbae54463647e99","permalink":"https://airinetwork.com/platform/healthspark/finding/audit-rights-dpa-residency-313e9dbae54463647e99","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" You have the right to:\n Get an electronic or paper copy of your medical record.\n Ask us to correct your record if you believe it is incomplete or inaccurate.\n Request confidential communications (e.g., alternative address or phone).\n Ask us to limit what we use or share—we may deny most requests, but we must grant a restriction on disclosures to a health plan if you pay in full out‑of‑pocket, unless disclosure is required by law.\n Receive a list of certain disclosures we made in the six years prior to your request.\n Choose a representative to act on your behalf (e.g., medical power of attorney).\n Receive a paper copy of this Notice at any time, even if you agreed to receive it electronically.\n File a complaint without retaliation if you feel we have violated your rights (see \"Complaints\" below).\n To exercise any right listed above, email contact@joinhealthspark.com or mail a signed request to the Privacy Officer at the address below.","caution":null,"provenance":{"source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","snapshot_sha256":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665","wayback_url":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20You%20have%20the,at%20the%20address%20below.","structural_citation":"Privacy Policy › “Your Rights”","citation_basis":"heading_path","char_start":1819,"char_end":2767,"retrieved_at":"2026-07-20T00:35:48.395854+00:00"}}],"documents":[{"doc_type":"privacy","pdf_page_count":null,"extraction_method":null,"page_level_citations":false,"last_captured":"2026-07-20","last_verified_scan":"2026-07-20","verified_scan_count":1}],"clause_intelligence":{"clauses_count":7,"risk_patterns_count":1,"stance_events_count":1,"patterns_by_family":{"privacy_sharing":1},"risk_summary":{"medium":1},"evidence":[{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties. Facilitate organ and tissue donation or procurement. Conduct research following internal review protocols to ensure the balancing of privacy and research needs. Avert a serious threat to health or safety. Assist in specialized government functions such as national security, intelligence and protectiv...","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties. Facilitate organ and tissue donation or procurement. Conduct research following internal review protocols to ensure the balancing of privacy and research needs. Avert a serious threat to health or safety. Assist in specialized government functions such as national security, intelligence and protective services. Inform military and veteran authorities if you are an armed forces member (active or reserve). Inform a correctional institution if you are an inmate. Inform workers' compensation carriers or your employer if you are injured at work. Recommend treatment alternatives. Tell you about health-related products and services. Communicate within our organization for treatment, payment, or healthcare operations. Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment and improvement, care coordination and the qualifications and training of healthcare professionals. Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information. We may also use or disclose your personal or health information for operational purposes.","source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20Inform%20coroners%2C%20medical,for%20operational%20purposes.%20","structural_citation":"Privacy Policy › “Business Associates”","citation_basis":"heading_path","char_start":6164,"char_end":7647}}]},"tier_conditions":[{"tier":"Business","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":2,"citations":[{"finding_id":"bb5d5c69-1ba5-48ac-a550-14d3a16c08ff","quote":" This Notice of Privacy Practices (\"Notice\") explains how HealthSpark Inc., HealthSpark Medical Group West PC, HealthSpark Medical Group PA (including its assumed name, HealthSpark Medical Group PC), and their licensed clinicians and business partners (collectively, \"HealthSpark,\" \"we,\" \"our,\" or \"us\") may use and disclose your protected health information (PHI) to provide treatment, obtain payment, and conduct health‑care operations, as well as other uses permitted or required by law.\n It also describes your rights to access and control your PHI.\n HealthSpark operates as an organized health‑care arrangement. All covered entities and workforce members within HealthSpark agree to follow the terms of this Notice and may share PHI with one another for treatment, payment, and health‑care‑operations purposes. This Notice applies to the technology-enabled and in-person physical therapy services provided by HealthSpark.","source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20This%20Notice%20of,services%20provided%20by%20HealthSpark.","structural_citation":"Privacy Policy › “PLEASE READ THIS NOTICE CAREFULLY”"},{"finding_id":"22911295-01e0-42a9-9d00-e379563b2b70","quote":" We sometimes rely on third-party service providers—such as secure cloud-hosting platforms, claims-clearinghouses, electronic-prescription networks, telehealth infrastructure vendors, and analytics partners—to support our treatment, payment, and health-care-operations activities. These companies, known under HIPAA as Business Associates, may receive, create, or maintain your protected health information on our behalf only after signing a Business Associate Agreement (BAA) that contractually requires them to: (a) use or disclose PHI solely as permitted by us or as required by law; (b) implement appropriate administrative, physical, and technical safeguards to protect the information; (c) report any suspected or confirmed privacy or security breach to HealthSpark without unreasonable delay; and (d) ensure that any of their subcontractors who handle PHI are bound by the same protections. We share the minimum necessary information for them to perform their duties, and we monitor their compliance as part of our ongoing privacy-and-security program.\n We may also use and disclose your health information to:\n Comply with federal, state or local laws that require disclosure.\n Assist in public health activities such as tracking diseases or medical devices.\n Inform authorities to protect victims of abuse or neglect.\n Comply with federal and state health oversight activities such as fraud investigations.\n Respond to law enforcement officials or to judicial orders, subpoenas or other processes.\n","source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20We%20sometimes%20rely,or%20other%20processes.%20","structural_citation":"Privacy Policy › “Business Associates”"}]},{"tier":"Government","surface":"privacy_data_use","verdict":"worsens","confidence":"high","citation_count":1,"citations":[{"finding_id":"3840be90-fd64-4570-8c4a-cc8f98d7bb4c","quote":" Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties.\n Facilitate organ and tissue donation or procurement.\n Conduct research following internal review protocols to ensure the balancing of privacy and research needs.\n Avert a serious threat to health or safety.\n Assist in specialized government functions such as national security, intelligence and protective services.\n Inform military and veteran authorities if you are an armed forces member (active or reserve).\n Inform a correctional institution if you are an inmate.\n Inform workers' compensation carriers or your employer if you are injured at work.\n Recommend treatment alternatives.\n Tell you about health-related products and services.\n Communicate within our organization for treatment, payment, or healthcare operations.\n Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment and improvement, care coordination and the qualifications and training of healthcare professionals.\n Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information.\n We may also use or disclose your personal or health information for operational purposes. ","source_url":"https://joinhealthspark.com/legal/notice-of-privacy-practices","deep_link":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20Inform%20coroners%2C%20medical,for%20operational%20purposes.%20","structural_citation":"Privacy Policy › “Business Associates”"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"HealthSpark — AI policy risk findings","description":"Verified, cited policy findings for HealthSpark across 13 risk surfaces.","url":"https://airinetwork.com/platform/healthspark","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"partially_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":2}],"hasPart":[{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-bab5f63b5727742a9349","text":" This Notice of Privacy Practices (\"Notice\") explains how HealthSpark Inc., HealthSpark Medical Group West PC, HealthSpark Medical Group PA (including its assumed name, HealthSpark Medical Group PC), and their licensed clinicians and business partners (collectively, \"HealthSpark,\" \"we,\" \"our,\" or \"us\") may use and disclose your protected health information (PHI) to provide treatment, obtain payment, and conduct health‑care operations, as well as other uses permitted or required by law.\n It also describes your rights to access and control your PHI.\n HealthSpark operates as an organized health‑care arrangement. All covered entities and workforce members within HealthSpark agree to follow the terms of this Notice and may share PHI with one another for treatment, payment, and health‑care‑operations purposes. This Notice applies to the technology-enabled and in-person physical therapy services provided by HealthSpark.","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-1dee4b7778763774db08","text":" Privacy & Security. We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy and security of your PHI.\n Notice. We must give you this Notice and follow the terms currently in effect.\n Breach Notification. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.\n Changes to This Notice. We may change this Notice at any time. Revised Notices apply to all PHI we maintain and will be posted on our website and made available upon request.\n Where any other state law provides greater privacy protection than HIPAA, we will follow that state law.","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-619c72a7fd47ec24652b","text":" We sometimes rely on third-party service providers—such as secure cloud-hosting platforms, claims-clearinghouses, electronic-prescription networks, telehealth infrastructure vendors, and analytics partners—to support our treatment, payment, and health-care-operations activities. These companies, known under HIPAA as Business Associates, may receive, create, or maintain your protected health information on our behalf only after signing a Business Associate Agreement (BAA) that contractually requires them to: (a) use or disclose PHI solely as permitted by us or as required by law; (b) implement appropriate administrative, physical, and technical safeguards to protect the information; (c) report any suspected or confirmed privacy or security breach to HealthSpark without unreasonable delay; and (d) ensure that any of their subcontractors who handle PHI are bound by the same protections. We share the minimum necessary information for them to perform their duties, and we monitor their compliance as part of our ongoing privacy-and-security program.\n We may also use and disclose your health information to:\n Comply with federal, state or local laws that require disclosure.\n Assist in public health activities such as tracking diseases or medical devices.\n Inform authorities to protect victims of abuse or neglect.\n Comply with federal and state health oversight activities such as fraud investigations.\n Respond to law enforcement officials or to judicial orders, subpoenas or other processes.\n","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-015c51f04f6d06c066cb","text":" Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties.\n Facilitate organ and tissue donation or procurement.\n Conduct research following internal review protocols to ensure the balancing of privacy and research needs.\n Avert a serious threat to health or safety.\n Assist in specialized government functions such as national security, intelligence and protective services.\n Inform military and veteran authorities if you are an armed forces member (active or reserve).\n Inform a correctional institution if you are an inmate.\n Inform workers' compensation carriers or your employer if you are injured at work.\n Recommend treatment alternatives.\n Tell you about health-related products and services.\n Communicate within our organization for treatment, payment, or healthcare operations.\n Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment and improvement, care coordination and the qualifications and training of healthcare professionals.\n Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information.\n We may also use or disclose your personal or health information for operational purposes. ","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/privacy-data-use-09c69cb149dac9b43d12","text":"For example, we may communicate with individuals involved in your care or payment for that care, such as family or guardians and send appointment reminders.\n All other uses and disclosures, not previously described, may only be done with your written authorization. We will also obtain your authorization before we:\n Use or disclose your health information for marketing purposes;","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/moderation-enforcement-9f3ce0027a06f9942570","text":" You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights:","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/healthspark/finding/audit-rights-dpa-residency-313e9dbae54463647e99","text":" You have the right to:\n Get an electronic or paper copy of your medical record.\n Ask us to correct your record if you believe it is incomplete or inaccurate.\n Request confidential communications (e.g., alternative address or phone).\n Ask us to limit what we use or share—we may deny most requests, but we must grant a restriction on disclosures to a health plan if you pay in full out‑of‑pocket, unless disclosure is required by law.\n Receive a list of certain disclosures we made in the six years prior to your request.\n Choose a representative to act on your behalf (e.g., medical power of attorney).\n Receive a paper copy of this Notice at any time, even if you agreed to receive it electronically.\n File a complaint without retaliation if you feel we have violated your rights (see \"Complaints\" below).\n To exercise any right listed above, email contact@joinhealthspark.com or mail a signed request to the Privacy Officer at the address below.","isBasedOn":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices","dateCreated":"2026-07-20T00:35:48.395854+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"}}],"variableMeasured":[{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" This Notice of Privacy Practices (\"Notice\") explains how HealthSpark Inc., HealthSpark Medical Group West PC, HealthSpark Medical Group PA (including its assumed name, HealthSpark Medical Group PC), and their licensed clinicians and business partners (collectively, \"HealthSpark,\" \"we,\" \"our,\" or \"us\") may use and disclose your protected health information (PHI) to provide treatment, obtain payment, and conduct health‑care operations, as well as other uses permitted or required by law.\n It also describes your rights to access and control your PHI.\n HealthSpark operates as an organized health‑care arrangement. All covered entities and workforce members within HealthSpark agree to follow the terms of this Notice and may share PHI with one another for treatment, payment, and health‑care‑operations purposes. This Notice applies to the technology-enabled and in-person physical therapy services provided by HealthSpark.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “PLEASE READ THIS NOTICE CAREFULLY”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20This%20Notice%20of,services%20provided%20by%20HealthSpark."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Privacy & Security. We are required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to maintain the privacy and security of your PHI.\n Notice. We must give you this Notice and follow the terms currently in effect.\n Breach Notification. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.\n Changes to This Notice. We may change this Notice at any time. Revised Notices apply to all PHI we maintain and will be posted on our website and made available upon request.\n Where any other state law provides greater privacy protection than HIPAA, we will follow that state law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Our Legal Duties”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20Privacy%20%26%20Security.,follow%20that%20state%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We sometimes rely on third-party service providers—such as secure cloud-hosting platforms, claims-clearinghouses, electronic-prescription networks, telehealth infrastructure vendors, and analytics partners—to support our treatment, payment, and health-care-operations activities. These companies, known under HIPAA as Business Associates, may receive, create, or maintain your protected health information on our behalf only after signing a Business Associate Agreement (BAA) that contractually requires them to: (a) use or disclose PHI solely as permitted by us or as required by law; (b) implement appropriate administrative, physical, and technical safeguards to protect the information; (c) report any suspected or confirmed privacy or security breach to HealthSpark without unreasonable delay; and (d) ensure that any of their subcontractors who handle PHI are bound by the same protections. We share the minimum necessary information for them to perform their duties, and we monitor their compliance as part of our ongoing privacy-and-security program.\n We may also use and disclose your health information to:\n Comply with federal, state or local laws that require disclosure.\n Assist in public health activities such as tracking diseases or medical devices.\n Inform authorities to protect victims of abuse or neglect.\n Comply with federal and state health oversight activities such as fraud investigations.\n Respond to law enforcement officials or to judicial orders, subpoenas or other processes.\n","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Business Associates”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20We%20sometimes%20rely,or%20other%20processes.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"medium","description":" Inform coroners, medical examiners and funeral directors of information necessary for them to fulfill their duties.\n Facilitate organ and tissue donation or procurement.\n Conduct research following internal review protocols to ensure the balancing of privacy and research needs.\n Avert a serious threat to health or safety.\n Assist in specialized government functions such as national security, intelligence and protective services.\n Inform military and veteran authorities if you are an armed forces member (active or reserve).\n Inform a correctional institution if you are an inmate.\n Inform workers' compensation carriers or your employer if you are injured at work.\n Recommend treatment alternatives.\n Tell you about health-related products and services.\n Communicate within our organization for treatment, payment, or healthcare operations.\n Communicate with other providers, health plans, or their related entities for their treatment or payment activities, or health care operations activities relating to quality assessment and improvement, care coordination and the qualifications and training of healthcare professionals.\n Provide information to other third parties with whom we do business, such as a record storage provider. However, you should know that in these situations, we require third parties to provide us with assurances that they will safeguard your information.\n We may also use or disclose your personal or health information for operational purposes. ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Business Associates”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20Inform%20coroners%2C%20medical,for%20operational%20purposes.%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":"For example, we may communicate with individuals involved in your care or payment for that care, such as family or guardians and send appointment reminders.\n All other uses and disclosures, not previously described, may only be done with your written authorization. We will also obtain your authorization before we:\n Use or disclose your health information for marketing purposes;","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Business Associates”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=For%20example%2C%20we%20may,information%20for%20marketing%20purposes%3B"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]},{"@type":"PropertyValue","name":"moderation_enforcement","value":"unknown","description":" You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “San Francisco, CA 94103”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20You%20may%20also,Office%20for%20Civil%20Rights%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" You have the right to:\n Get an electronic or paper copy of your medical record.\n Ask us to correct your record if you believe it is incomplete or inaccurate.\n Request confidential communications (e.g., alternative address or phone).\n Ask us to limit what we use or share—we may deny most requests, but we must grant a restriction on disclosures to a health plan if you pay in full out‑of‑pocket, unless disclosure is required by law.\n Receive a list of certain disclosures we made in the six years prior to your request.\n Choose a representative to act on your behalf (e.g., medical power of attorney).\n Receive a paper copy of this Notice at any time, even if you agreed to receive it electronically.\n File a complaint without retaliation if you feel we have violated your rights (see \"Complaints\" below).\n To exercise any right listed above, email contact@joinhealthspark.com or mail a signed request to the Privacy Officer at the address below.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ac3fb8d6d974b1518f2af934f2baf61f668bd5d70ae628b69b5dd0e765427665"},{"@type":"PropertyValue","name":"wayback_url","value":"https://web.archive.org/web/20260720003533/https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"source_url","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Your Rights”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://joinhealthspark.com/legal/notice-of-privacy-practices#:~:text=%20You%20have%20the,at%20the%20address%20below."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:35:48.395854+00:00"}]}]}}