Consumer Health Data Privacy Notice

Last Updated: Jan 30, 2026

This notice supplements the Privacy Notice of Everly Health, Inc. and affiliates (“we,” “us,” “our”). It is required by Washington’s My Health My Data Act and Nevada’s Consumer Health Data Privacy law (“Applicable Laws”) and applies only to “Consumer Health Data” under those laws.

CONTENTS

1. SCOPE OF THE POLICY

2. INFORMATION WE COLLECT

3. HOW WE USE AND SHARE YOUR INFORMATION

4. YOUR RIGHTS AND CHOICES REGARDING YOUR DATA

1. SCOPE OF THE POLICY

This policy applies to consumers in Washington and Nevada who are acting in an individual or household capacity.

A. What Counts as “Consumer Health Data”

  • Washington:

  “Consumer Health Data” means personal information that is linked or can reasonably be linked to you and that identifies your past, present, or future physical or mental health status. This may include certain information that is not medical in nature but still relates to your health.

  • Nevada:

  “Consumer Health Data” means personally identifiable information that is linked or can reasonably be linked to you and that is used to identify your past, present, or future health status.

B. What Is Not Consumer Health Data

This policy does not cover Protected Health Information regulated by HIPAA (see our HIPAA Notice), publicly available information, or deidentified data. The following categories are also excluded under applicable laws:

  • Medical record information
  • Research data
  • Deidentified derivative data
  • Data used only for clinical quality improvement, public health activities, or HIPAA-defined “limited data sets”

2. INFORMATION WE COLLECT

A. Info We Collect

Depending on your interactions with us, the features you use, the choices you make, and your location, we may collect the following types of information:

  • Information about your health conditions, symptoms, diagnoses, tests, treatments, and medications.
  • Reproductive or sexual health information, such as sexually transmitted infection (STI) testing or pregnancy-related tests and medications.
  • Information about bodily functions, vital signs, and other health-related measurements.
  • Information about your use or purchase of health-related tests or medications, as well as your intent to seek health care or health products.
  • Genetic data.
  • Internet or network activity—such as IP or MAC addresses and device or browser information—when it identifies that you are seeking, receiving, or purchasing health services or information, including the use of online health tools.
  • Inferences we draw from any of the information listed above.

B. Sources of Data

We may collect Consumer Health Data from the following sources:

  • Directly from you or your authorized representative, including from any connected devices or profiles you choose to enable.
  • From third parties, such as telehealth providers, laboratories, health plans, service providers or HIPAA business associates, and vendors who support our interactive features.
  • Automatically from our websites, apps, and your devices. For more details, please see our Privacy Notice, our HIPAA Notice, and our Terms of Use.
  • From information you voluntarily submit in open-text fields, such as comments or messages you choose to provide.

3. HOW WE USE AND SHARE YOUR INFORMATION

We may share Consumer Health Data in the following ways:

  • Affiliates: We may share information with our subsidiaries and related companies as needed to provide services and operate our business, including but not limited to Everly Health, Inc. (Everly Health); Everly Well, Inc. (Everlywell); PWNHealth, LLC ; PWN Remote Care Services P.A. and affiliated practices; Everly Provider Group DE, P.A. and affiliated practices; Everly Diagnostics, Inc. (EverlyDx); PWN Laboratory, LLC.
  • Service Providers: We share data with vendors who perform services on our behalf under contractual obligations that limit their use of the data and require its protection.
  • Business Partners: We may share data with partners who offer co-branded or joint services, or with companies you choose to interact with through our services.
  • Financial Institutions and Payment Processors: We share information as needed to process payments, prevent fraud, reduce credit risk, perform analytics, and support related financial operations.
  • Government Agencies, Compliance, Safety, and Public Health: We may disclose data to respond to subpoenas, court orders, or agency requests; to comply with legal or regulatory requirements; or to prevent physical harm, financial loss, or illegal activity, including security incidents.
  • Other Third Parties: We may share information when necessary to comply with applicable laws or to protect our rights or the rights of our customers.
  • Other Users or Individuals: We may disclose data to other individuals when you direct us to do so through features you choose to use.
  • The Public: We may make information public when you choose to share it publicly, such as through endorsements, demographic information, or content and files you submit.

4. YOUR RIGHTS AND CHOICES REGARDING YOUR DATA

A. Your Rights and Choices

Subject to applicable law, you may have the right to:

  • Access: You may request confirmation of whether we process your Consumer Health Data and obtain information about that processing.
  • Delete: You may request that we delete your Consumer Health Data.
  • Withdraw Consent: You may withdraw consent where our processing relies on your consent.
  • Change: You may request corrections or changes to the Consumer Health Data we collect.

B. How to Exercise Your Rights

  • Contact Us:

Everly Health, Inc.
5209 Burnet Road, Suite 300
Austin, Texas 78756
888-813-0230
[email protected]

  • Verification: We will verify and respond to your request in accordance with applicable law. We may request additional information—such as your address, email, or a government-issued ID—to protect against fraudulent requests.
  • Authorized Agents: If you submit a request through an authorized agent, we may require proof of authorization, which may include signed permission from you.
  • Non-Discrimination: We will not discriminate against you for exercising your rights, although some features or functionality may change or become unavailable if you request deletion or withdraw consent.
  • Appeals and Complaints: If we deny your request, you may appeal the decision. If your appeal is unsuccessful, you may file a complaint with your state authority, including: