HIPAA Compliance

⦿ Data Security

All PHI is encrypted in transit and at rest using industry-standard encryption protocols (SSL/TLS and AES-256).

We host our platform and patient records in HIPAA-compliant cloud environments with secure access controls and continuous monitoring.

All data transmission between patients, providers, and our pharmacy is conducted through secure, authenticated channels.

⦿ Access Control

Only licensed providers, pharmacy staff, and authorized personnel may access PHI — and only for the purpose of treatment, prescription fulfillment, or customer support.

All staff with access to PHI receive regular HIPAA training and are bound by confidentiality agreements and internal data security policies.

⦿ Use & Disclosure of Information

PHI is used strictly to:

• Provide medical consultations
• Prescribe and dispense medications
• Communicate with you about your care
• Process payments and pharmacy records

Telederm.me does not sell, rent, or share your health data for marketing or third-party purposes without your explicit written authorization.

⦿ National Coverage & Legal Compliance

We provide services across multiple U.S. states and comply with state-specific privacy and telehealth laws, including those governing minors, reproductive health, and prescription requirements.

All prescriptions are issued by state-licensed physicians and dispensed by a licensed pharmacy, in accordance with state board of pharmacy and telemedicine regulations.

⦿ Patient Rights

You have the right to:

• Request access to your health records
• Ask for corrections to your information
• Obtain an accounting of disclosures
• Revoke consent at any time, where applicable