HIPAA and Health Information Notice (Not a Notice of Privacy Practices)
Last updated: August 1, 2026
About This Notice
This notice explains the limited role of Oxford Marketing LLC dba AvenirMD (“AvenirMD”) and how HIPAA may apply to information handled in connection with services coordinated by Rimo Health LLC (“Rimo”) and independent medical practices and providers. This document is not a healthcare provider’s Notice of Privacy Practices.
AvenirMD Is Not a HIPAA Covered Entity
AvenirMD is a marketing company and is not a healthcare provider, health plan, or healthcare clearinghouse. AvenirMD therefore is not itself a HIPAA covered entity. Whether information is protected health information depends on the context and the parties’ relationships; names, contact information, and account information can be protected health information in some circumstances.
However, in connection with the medical services you receive through the Service, you may share information that is protected under HIPAA or under applicable state privacy laws. That information is governed by your Medical Group's Notice of Privacy Practices, not this page.
Your Medical Group's Notice of Privacy Practices
Rimo and the independent medical practices and providers that deliver clinical services are separate from AvenirMD. The applicable medical practice is responsible for providing its Notice of Privacy Practices describing how it uses and discloses protected health information.
You receive the Medical Group's Notice of Privacy Practices when you create your patient account and complete your first medical consultation through the Service. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).
If you have questions about the Medical Group's Notice of Privacy Practices, or you need a copy, please contact your Medical Group through the patient portal or contact us at hello@reply.avenir-md.com and we will help you obtain one.
AvenirMD as a Business Associate
AvenirMD will act as a HIPAA business associate only if it performs services involving protected health information on behalf of a covered entity under a written Business Associate Agreement. If no such agreement and function exist, AvenirMD should not receive or maintain protected health information on behalf of a covered entity.
What Is Protected Information
For purposes of this notice and the AvenirMD Privacy Policy, "Protected Information" includes:
"Protected health information" as defined by HIPAA, when applicable
Health or medical information that is subject to specific protections under applicable state laws
Protected Information does not include information that has been de-identified in accordance with HIPAA or applicable state laws.
State Privacy Laws
In addition to HIPAA, several states have laws that protect consumer health data outside of HIPAA. These laws may give you additional rights — including rights to access, correct, delete, and withdraw consent for the use of your consumer health data. For information about how AvenirMD handles consumer health data under these state laws, please see our Consumer Health Data Privacy Policy.
How to Reach Us
If you have any questions about this HIPAA Notice or about how AvenirMD handles your information:
Email: hello@reply.avenir-md.com
Mail:
Oxford Marketing LLC dba AvenirMD
228 Park Ave S, Num 742392
New York, NY 10003
If you have questions specifically about the medical care you receive or about the Medical Group's privacy practices, please contact your Medical Group through the patient portal.
This notice describes AvenirMD’s limited marketing role. It is not a substitute for the applicable medical practice’s Notice of Privacy Practices, which must be provided through the Rimo-coordinated patient flow.