Privacy notice – CoverMyMeds portal

Effective Date: May 12, 2026

At CoverMyMeds (“CMM”), we value the trust that our customers, including healthcare providers, pharmacies, and pharmaceutical manufacturers place in us to use and protect personal information. This Privacy Notice applies to our use of personal information we collect when you create a CoverMyMeds account, use CoverMyMeds’ services (“CMM Portal”) or in the ordinary course of business. It also tells you how we will use, share and protect your personal information. When you use the CMM Portal or provide personal information, you accept the privacy practices described in this Privacy Notice. Please read this Privacy Notice in full to understand our privacy practices before you use the CMM Portal or submit any personal information. You are also encouraged to access our supplemental privacy notice linked above titled, “View State-Specific Privacy Rights Here” that is applicable in specific situations.

Scope

This Privacy Notice applies to CMM Portal found at https://oidc.covermymeds.com/login.

The Privacy Notice does not apply to:

Individual health providers and practices who have separate privacy notices or Notice of Privacy Practices.
CMM affiliates and subsidiaries that may have separate websites, subdomains, and applications through other web, mobile, cloud or SaaS platforms which are not subject to this Privacy Notice.
CMM business partners, ad networks and other third parties that may have their own websites and services with separate privacy notices.

We encourage you to read the privacy notices of all websites and applications that you visit so that you understand their privacy practices.

Personal Information We Collect

When you use the CMM Portal, we may collect personal information about you. The personal information we may collect includes, but is not limited to:

First name, last name, middle name, and middle name initial
Date of birth
Licenses and certifications, degrees and schooling information
Business address, business telephone number (office, cell, fax, etc.)
Business and personal electronic mail address, personal home address, and personal telephone number (home, cell, fax, etc.)
Occupation/title, other professional and employment information, such as Income/salary/service fees/other compensation, along with NPI and DEA numbers
User behavior information such as, IP address, user’s browser type, user’s operating system
Device identification number/serial number (such as for mobile phone, tablet, or computer), device/user activity (such as login-logout info, sites/pages visited, number of visits, click stream, navigation, beacon signal hits, errors, crash rate, or other user activities)
Marketing preferences, such as text message or email notification and frequency
Geo-location/GPS information
Information you provide directly to us:
- When you use the CMM Portal.
- When you use offline features related to the CMM Portal, such as communicating with us by phone, e-mail, or in person.
- When you interact with us in the ordinary course of business.
We may take Information about you from publicly available data, customers, a data bank or aggregator, third party verification service partners, and business affiliates and combine it with information we already have about you**.** Personal information may be combined with information that does not identify you. If we combine information that does not identify you with your Personal Information, it will be treated as Personal Information.
Protected Health Information (PHI) provided by Covered Entities within the CMM Portal is governed by the CoverMyMeds’ Business Associate Agreement: https://www.covermymeds.health/about/privacy/tos/baa

Tracking Technologies We Use

We use various technologies to collect personal information including:

Cookies
- We and our subsidiaries, business partners, marketing partners, affiliates, or other vendors may use cookies. Cookies uniquely identify the device or user account you use for this Portal. You can control the use of cookies by adjusting your browser preferences at any time. If you reject cookies, you may still use our Portal; however, rejecting cookies may limit your ability to use some features of our Portal.
Geo-location Services
- When you allow us to track your location, we may collect information about your location for our Portal. We use various technologies to determine location, such as sensor data from your device that may provide information from nearby Wi-Fi access points and cell towers.
Other Tracking Technologies
- We and our subsidiaries, business partners, marketing partners, affiliates, or other service providers may also use technologies such as web beacons, scripts, and tags, along with web analytics (e.g., Google Analytics), product analytic tools, such as Pendo, Fullstory and Glassbox, and third-party software codes such as SDKS, open source and other embedded APIs.
- We also use local storage (such as HTML5) to collect and store your information and preferences and our third-party partners may do the same.

These tracking technologies are used to gather demographic information, detect fraud, waste, and abuse, identify trends and gather analytics, remember user settings, perform diagnostic services, and to improve the Portal. When the tracking information we collect is considered individually identifiable information, the data is treated as Protected Health Information (''PHI'') which is defined in the Health Insurance Portability and Accountability Act (''HIPAA''). We will use and disclosure this information as required by HIPAA’s Privacy and Security Rule.

How We Use the Personal Information Collected

We may use the personal information we collect for purposes such as:

Customer and troubleshooting support
Error detection and debugging
Fraud detection or monitoring services
Identity verification
Marketing initiatives via surveys, contests and research activities
Optimization services
Performance testing
Personalized user service or customized site-content based on user preferences
Reporting or data analytics services
Network or hosting services
Payment processing services
Artificial intelligence
Marketing notices
To provide services described in our Terms of Services

We may also use the information collected for the following purposes:

Surveys or Contests
- If you participate in surveys, we will request certain personal information from you. Participation in these surveys or contests is completely voluntary and you have a choice whether to disclose this information. We may use a third-party service provider to conduct these surveys or contests. We will not share the personal information you provide through a contest or survey with other third parties unless we give you prior notice and choice.
Advertising
- We may partner with a third party to manage our advertising. Our third-party partners may use cookies and other technologies to gather information about your activities on this website and other websites to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt out via our cookie consent manager, according to the rights associated to your geo location.
Newsletters
- We may use your name and email address to send you our newsletter and will obtain your prior consent when required by law. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in those emails, or by contacting us using the contact information listed below.

To verify your identity, the CMM Portal may provide links to third-party websites. When you click these links, you will leave the CMM Portal and interact directly with the third party. We encourage you to review their privacy notices before providing any information. These third-party sites will allow CMM to access information about you to verify your identification.

We may share personal information with other business units owned by CMM or our customers, such as pharmaceutical manufacturers, when permitted by law. We may provide your personal information to third parties that provide services to help us with our business activities. These business activities include reporting or data analytics services, payment processing services, identification verification, fraud detection or monitoring services, error detection and debugging, customer and troubleshooting support, and performance testing services. These companies are authorized to use personal information about you only as necessary to provide these services to us.

We may need to share information with other companies, organizations or individuals if we have a good faith belief that access, use, preservation, or disclosure of that information is reasonably necessary to:

Meet applicable laws, regulations, legal processes, or enforceable governmental requests
Enforce applicable Terms of Service, including investigation of potential violations
Detect, prevent, or otherwise address fraud, security or technical issues
Protect against harm to the rights, property or safety of our users, CMM, or the public as required or permitted by law
Engage in a merger, acquisition, reorganization, or sale of all or a portion of CMM assets.

Your Choices

You can limit the personal information we have by choosing not to provide it within the CMM Portal or by failing to provide information through any offline features or in the ordinary course of business. Depending on where you live, you may have certain rights with respect to your personal information under applicable data protection laws. You may assert those rights by clicking on the “View State-Specific Privacy Rights Here” link located at the top of this notice underneath the effective date.

Access to Personal Information

Personal Information collected through the CMM Portal may be accessed and modified by contacting CMM’s support center.

Retention

We will retain your personal information if you use the Portal, your account is active, as necessary to comply with our legal obligations, resolve disputes or enforce our agreements.

Health Insurance Portability and Accountability Act (''HIPAA'')

As a key provider of services and technology to the healthcare industry, CMM has implemented programs to address the privacy and security requirements of HIPAA. The CMM Portal does not store health information on your device.

How We Protect Your Information

We protect the information we collect with proper physical, electronic and administrative safeguards. We only allow our employees, contractors, and agents to access personal information if they need access to perform services on our behalf. They are also subject to confidentiality obligations.

Any sensitive personal information is transmitted in an encrypted form using SSL encryption. Even though we have security safeguards, it is impossible to guarantee 100% security. If you have any questions about security or believe that your interactions with us are no longer secure (for example, you feel that your account with us has been compromised), you must notify us immediately by email at privacy@covermymeds.com.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Updates may describe new features, products or services. Updates may also describe changes in how we use your personal information or to your controls. We will not apply changes to this Privacy Notice retroactively to personal information we have previously collected. Since we may make changes, we recommend that you read the current version of this Privacy Notice from time to time. If we change this notice, we will update the “Effective Date” at the beginning of this notice.

Contact Information

If you have questions or concerns about this Privacy Notice, our information handling practices, or any other aspect of privacy and security of your personal information, please contact us at: privacy@covermymeds.com.

You may also write to us at:

CoverMyMeds LLC ATTN: Privacy Officer 910 John Street Columbus, Ohio 43222