Privacy Policy
Effective September 14, 2026
This policy explains what Belmont Labs, Inc. ("Belmont Labs," "we") collects through the Primary Care Live website and app, how we use it, and the choices you have. Please also read the Terms of Use.
Two kinds of information
Protected health information
Health information you share through the app (intake answers, device readings, messages with your practice, visit records, insurance details, pharmacy) is protected health information under HIPAA. Your practice is the "covered entity" responsible for it. Belmont Labs handles it only as your practice's "business associate," under a written Business Associate Agreement, and only to run the Service for the practice. How your practice uses and shares your health information is described in the practice's Notice of Privacy Practices, which you can read and which controls over this policy for health information.
Everything else
This policy covers the rest: your account details, payment information, device and app data, and information collected on the website.
What we collect
- Account information: name, username, email, phone number, date of birth, and the practice you belong to.
- Payment information: your card is entered directly into Stripe; we receive only a token, the card brand, last four digits, and expiration. Financing is handled by Affirm under Affirm's privacy policy.
- Device and app data: device model, operating system, app version, push-notification token, Bluetooth pairing with your monitoring device, crash reports, and login records (time, IP address, device) used to keep your account secure.
- Location: the state you tell us you are in when joining a video visit, which your clinician's license requires. We do not track your precise location.
- Website: standard server logs (IP address, browser, pages requested) and the one first-party cookie described in our Cookie Policy.
How we use it
- To provide the Service to you and your practice, including video visits, readings, messages, and payments.
- To keep accounts secure: login codes, two-step verification, session management, fraud prevention.
- To send service messages: login codes, appointment reminders, "you have a new message" alerts, and receipts. These never contain health details.
- To bill for the Service and to meet legal, accounting, and audit obligations.
- To fix problems and improve reliability.
We do not sell personal information, we do not use health information for advertising, and we do not show advertising in the Service.
Who we share with
- Your practice and the staff it authorizes.
- Service providers that help us run the Service under contracts that require them to protect your information: cloud hosting (DigitalOcean), payment processing (Stripe), financing (Affirm), transactional email (MailerSend), push notifications (Apple), and, when a practice enables them, e-prescribing (DoseSpot / Surescripts) and claims clearinghouses. Service providers that could access health information sign Business Associate Agreements.
- Legal: when required by law, legal process, or to protect the rights, safety, or property of patients, practices, or Belmont Labs.
- Business transfer: if Belmont Labs is acquired or merges, information may transfer to the successor under this policy.
Security
Information is encrypted in transit (TLS) and at rest. Video visits are encrypted end to end between the two devices; our servers relay only what is needed to connect the call. Access to systems that hold health information is limited, logged, and reviewed. No system is perfectly secure; if a breach affecting you occurs, we and your practice will notify you as the law requires.
Retention
Account and security records are kept while your account is active and for a reasonable period afterward for legal and security purposes. Medical records are retained by your practice as required by law (in Texas, generally at least seven years, and longer for minors). If you close your account, we remove your login and contact details but your practice keeps its medical record of you.
Your choices and rights
- Update your profile, pharmacy, insurance, and card in the app.
- Turn notifications on or off, and choose whether previews show on your lock screen.
- Sign out other devices at any time in Settings.
- Request a copy of your medical record, or corrections to it, from your practice.
- Ask us to delete your login by contacting your practice or support@primarycarelive.com.
- Texas residents: we do not sell personal data or use it for targeted advertising, so there is nothing to opt out of.
Children
Accounts are for adults. A parent or legal guardian may manage the account of a minor patient with the practice's agreement.
Changes
If we change this policy in a material way, the app will ask you to review it. The effective date at the top always reflects the current version.
Contact
Belmont Labs, Inc. · San Antonio, Texas · support@primarycarelive.com. For questions about how your practice uses your health information, contact your practice's privacy officer, listed in its Notice of Privacy Practices.