Consumer Health Data Privacy Policy (Washington and Nevada)
Effective Date: July 26th, 2026
This Consumer Health Data Privacy Policy explains how You Are Accountable, Inc. (“Accountable,” “we,” “us”) collects, uses, and shares consumer health data, and the rights you have in it. This Consumer Health Data Policy applies to our website at https://www.youareaccountable.com, our mobile application and web application, and the related services we provide (collectively, the “Services”). It applies to Washington and Nevada residents whose consumer health data is collected in their respective states. . It also supplements our Privacy Policy; where your information is protected health information under HIPAA or substance use disorder records under 42 C.F.R. Part 2, those laws govern and are described in our Privacy Policy and Notice of Privacy Practices.
What “consumer health data” means here
Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. Because Accountable is a recovery-accountability platform, the fact that you use our Services at all is itself consumer health data, along with:
health conditions, treatment, and status information related to substance use and recovery, including program enrollment and participation;
drug, alcohol, and toxicology testing information — submissions, results, breathalyzer images, drug test videos, and related compliance records;
biometric data — the face-geometry data and face templates used to verify your identity (described in detail in Section 3 of our Privacy Policy);
session documentation notes created from coaching or care sessions;
approximate (city-level) location derived from your IP address, which could reasonably indicate your attempt to receive health services;
information about your use of the app and website that identifies you as seeking or receiving recovery services, including data collected through cookies and similar technologies on our public website.
Categories of consumer health data we collect, and why
We collect the categories above for the following purposes, and no others without your consent:
to provide the Services;
to verify insurance eligibility and obtain payment for your Services;
to communicate with you about your program and the Services;
to secure the Services, prevent fraud, and detect abuse;
to comply with legal obligations.
We collect only the consumer health data reasonably necessary for these purposes.
Sources
We collect consumer health data directly from you; automatically from your device and use of the Services (as described in our Privacy Policy); from the treatment program, provider, or payer you are enrolled through, where applicable; and from our laboratory partners, who return your test results to us.
How we share consumer health data
We do not sell consumer health data, and we will not sell it — a sale would require your separate, signed authorization, which we do not seek. We share consumer health data only:
with our service providers and processors, who act on our behalf under contracts restricting their use of the data — cloud hosting and identity verification (Amazon Web Services), payment processing (Stripe), AI transcription and documentation (Deepgram, OpenAI), crash reporting and product analytics (Sentry, PostHog), privacy-filtered website measurement (OursPrivacy), SMS delivery (Twilio), and laboratory testing (Central Tox Laboratories, PacTox Laboratories);
with your Partner (the treatment program, provider, or payer you are enrolled through), as part of providing the Services, with the consent obtained at enrollment;
with people you designate — family members, sponsors, or care team contacts — only with your consent, revocable at any time;
with Medicare and health plans to verify eligibility and obtain payment for your Services;
as required by law, subject to the limits of 42 C.F.R. Part 2 for substance use disorder records.
Affiliates: We do not share consumer health data with any affiliated companies.
We do not use consumer health data for advertising, and we do not process it for targeted advertising.
Your rights
If this policy applies to you, you have the right to:
Confirm and access — confirm whether we collect, share, or sell your consumer health data, and access it, including a list of the third parties with whom we have shared it and an active contact address for each;
Withdraw consent — withdraw any consent you have given for the collection or sharing of your consumer health data;
Delete — have your consumer health data deleted, including from our archives and backups, on the schedule the law provides. We will also notify our processors and any third parties with whom we shared the data of your deletion request. Note: where your records are also protected health records that we are legally required to retain (for example, under HIPAA, Part 2, or Medicare requirements), those retention laws may limit deletion, and we will tell you if that is the case;
Non-discrimination — exercise these rights without being discriminated against.
How to exercise your rights. Email privacy@youareaccountable.com or call (646) 450-7641. We will verify your identity before acting and respond within the time the law requires (generally 45 days). You may use an authorized agent, subject to verification.
Appeals. If we decline a request, you may appeal by replying to our decision or emailing privacy@youareaccountable.com with “Appeal” in the subject line. We will respond within 45 days. If your appeal is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint (Washington residents) or the Nevada Attorney General (Nevada residents).
Changes and contact
We will update this policy as our practices change, update the effective date, and obtain any newly required consents before collecting or sharing consumer health data in ways not described here. Questions: privacy@youareaccountable.com · (646) 450-7641 · You Are Accountable, Inc., 331 Newman Springs Road, Building 3, Suite 320, Red Bank, NJ 07701.
