EverCaire Consumer Health Data Privacy Notice

Dated: October 24, 2026.

This notice supplements the EverCaire Privacy Policy and applies to consumer health data as defined by the Washington My Health My Data Act, Nevada Senate Bill 370, and other applicable consumer health privacy laws. Where this notice and the Privacy Policy differ for consumer health data, this notice governs.

1. Consumer health data we collect

EverCaire exists to keep health records, so nearly everything you give us is consumer health data: the medical records, documents and notes you upload or write for yourself and the people you care for; the clinical content we extract from those records (test results, vital signs, medications, conditions, procedures, immunizations and similar); the questions you ask about a person's health and the answers; and the fact that you use a personal health record service. We do not collect precise geolocation, biometric identifiers, or genetic data unless they appear in a record you choose to upload.

2. Sources

You, when you upload records, write notes, enter a person's details or ask a question; and our own Service, when it reads and extracts the records you uploaded. We do not obtain consumer health data from data brokers, advertisers or public sources.

3. Why we collect and use it

Solely to provide the Service you asked for: to store, read, file and search your records, to make the summaries and documents you request, and to answer your questions. We do not use consumer health data for advertising, marketing, profiling or research, and we do not use it to train artificial intelligence models.

4. How we share it

Only with the service providers that run the Service for us, each bound by a contract that limits its use to the work it does for us and, where it can access health data, by a Business Associate Agreement; with a successor in a business transfer; as the law requires; or when you ask us to. The categories of providers, and the AI provider by name, are in section 5 of the Privacy Policy. We do not sell consumer health data, and we will never sell it without your separate, written authorization as the law requires. We do not share it for advertising.

5. Your rights

You may confirm whether we collect, share or sell your consumer health data; access it, including a list of the third parties with whom we have shared it; withdraw consent; and have it deleted. You can download and delete your data yourself inside the Service. To exercise any right you cannot exercise there, email admin@evercaire.com from the address on your account; we will verify the request and respond within 45 days, extendable by 45 more if reasonably necessary, and we will tell you if we extend. If we deny your request you may appeal by replying with "appeal" in the subject line; if the appeal is denied you may contact the Washington Attorney General, the Nevada Attorney General, or your state's attorney general.

6. Contact

admin@evercaire.com, or by mail to EverCaire, Inc., P.O. Box 21, Villanova, PA 19085. EverCaire, Inc., a Delaware corporation.