MedLocker Privacy Policy
How Alpine Labs collects, uses, protects, shares, retains, and deletes information in MedLocker.
Open policyPrivacy
One place for MedLocker privacy choices.
Review MedLocker policies and notices, submit privacy rights requests, and find the legal consent documents that govern records collection, platform processing, caregiver access, and optional data value programs.
Policies and notices
Public documents for MedLocker users and reviewers.
These pages are the public, responsive versions of MedLocker privacy and legal documents. They complement the product's future signed artifacts and audit records.
Consumer Health Data Privacy Notice
State consumer health data notice, covered categories, rights, opt-outs, and privacy request channels.
Open noticeTerms of Service
Rules for using MedLocker, product boundaries, user-directed sharing, and optional programs.
Open termsEpic / MyChart Disclosure
How Epic data moves into MedLocker after authorization, retention, disconnect behavior, and sharing boundaries.
Open disclosurePrivacy requests
Exercise privacy and consumer health data rights.
MedLocker may need to verify your identity or authority before completing a request. Do not include detailed medical facts unless MedLocker asks for them during verification.
Privacy request
Access, correction, deletion, portability, consent withdrawal, and third-party list requests.
Submit requestAppeal
Ask for a second review after a denied, partially denied, or unresolved privacy request.
Appeal a decisionDo not sell or share
Opt out of sale, sharing, targeted advertising, or certain profiling where rights apply.
Open opt-outLimit sensitive data
Limit sensitive personal information and consumer health data use or disclosure where available.
Open limit requestConsent documents
Documents prepared for in-app signing workflows.
These documents are public references now. Future MedLocker app work should render the same versioned text in first-party signing flows and store immutable signed artifacts with audit metadata.
Patient Directed Records Authorization
Authorization used before MedLocker requests outside records on the user's behalf.
Open authorizationMedLocker Platform Consent
Consent for receiving, storing, processing, displaying, and managing information in MedLocker.
Open consentData Sharing and Monetization Consent
Optional consent for research, life sciences, analytics, data licensing, compensation, and recontact programs.
Open consentCaregiver Access Authorization
User-directed authorization for caregiver, family, or personal representative access to MedLocker.
Open authorization