Privacy Policy
Alder Meridian LLC ("Alder Meridian", "we", "us") provides RelationshipOS, a patient operations platform used by healthcare clinics. This policy explains what information we collect, how we use it, how we protect it, and the choices available to you.
1. Two different roles
It matters which relationship you have with us, because different rules apply.
If you are a patient of a clinic that uses RelationshipOS
Your clinic is the covered entity responsible for your health information. Alder Meridian acts as its business associate under the Health Insurance Portability and Accountability Act (HIPAA), processing your information only to provide the platform to your clinic and only as permitted by our Business Associate Agreement with them. Your clinic's own Notice of Privacy Practices governs how your health information is used and disclosed. Requests about your health records should be directed to your clinic.
If you are a clinic, a prospective customer, or a visitor to this website
We handle your information as described below in our own right.
2. Information we collect
Information clinics and their patients enter into the platform
This includes patient records, appointments, treatment plans, lab results, messages, check-ins and payment records. We process this on behalf of the clinic. We do not sell it, mine it for advertising, or use it to train models.
Contact information
Names, email addresses, phone numbers and business details supplied when someone contacts us or signs up.
Mobile phone numbers
Where a patient consents to appointment text messages, the mobile number is collected by their clinic through the platform and used solely to send the messages described in our Messaging Program.
Technical information from this website
Standard server logs — IP address, browser type, pages requested and timestamps — used to keep the site secure and working. This marketing website does not use advertising or cross-site tracking cookies.
3. Mobile information and text messaging
Mobile information will never be shared or sold to third parties or lead generators.
No mobile data will be shared with third parties or affiliates for marketing or promotional purposes at any time. Text messaging originator opt-in data and consent are not shared with any third party except the licensed communications provider that transmits the messages on our behalf, and that provider may use the information only to deliver them.
Mobile numbers collected for text messaging are used only to send appointment confirmations, reminders and changes. We do not use them for marketing. Patients may withdraw consent at any time by replying STOP to any message or by changing their preferences in the patient portal. Full details, including message frequency and sample messages, are on the Messaging Program page.
4. How we use information
- To provide, maintain and support the RelationshipOS platform for clinics
- To send appointment messages that a patient has consented to receive
- To secure the service — authentication, audit logging, fraud and abuse prevention
- To respond to enquiries and provide customer support
- To process payments for memberships and services, through a payment processor
- To meet legal, regulatory and contractual obligations
We do not sell personal information. We do not use patient information for advertising, and we do not use it to train machine learning models.
5. When we share information
We share information only in these circumstances:
- With the clinic whose patient or staff member the information belongs to
- With service providers who help us operate the platform — hosting, database, payment processing and message delivery — each bound by contract to protect the information and use it only to provide their service to us. Where those providers handle protected health information, we enter into Business Associate Agreements with them.
- When required by law, such as a valid subpoena, court order or lawful request from a regulator
- To protect rights and safety, where disclosure is necessary to prevent harm or investigate a security incident
- In a business transfer, if Alder Meridian is involved in a merger or acquisition, subject to the same protections and with notice where required
We do not share mobile phone numbers or text messaging consent with any third party for their own purposes, and never with lead generators.
6. How we protect information
RelationshipOS is built with safeguards appropriate to protected health information, including encryption in transit, role-based access control, multi-factor authentication for staff accounts, step-up re-authentication for sensitive actions, tenant isolation between clinics, idle session timeouts, session revocation, and a tamper-evident audit log whose integrity can be verified on demand. Access to production systems is restricted and logged.
No system is perfectly secure. We maintain an incident and breach response process, including notification timelines, and will notify affected clinics in accordance with our agreements and applicable law.
7. How long we keep information
Patient information is retained for as long as the clinic's account is active, or as required by the clinic's own record retention obligations, and is deleted or returned in accordance with our Business Associate Agreement when the relationship ends. Audit records are retained as required by law. Website logs are kept for a limited period for security purposes.
8. Your choices and rights
Patients: requests to access, amend, restrict or receive an accounting of disclosures of your health information should go to your clinic, which is the covered entity. RelationshipOS provides the tooling clinics use to fulfil those requests, including records export and disclosure accounting.
Text messages: reply STOP to any message, or change your preferences in the patient portal.
Everyone else: to ask what information we hold about you, correct it, or request deletion, email privacy@relationshipos.health. Depending on where you live, you may have additional rights under state or national privacy law; we honour those where they apply.
9. Children
RelationshipOS is provided to healthcare clinics and is not directed to children. Where a clinic treats a minor, that information is handled under the clinic's own policies and applicable law. We do not knowingly collect information directly from children through this website.
10. Changes to this policy
We may update this policy. The "last updated" date above will change, and material changes will be communicated to clinics in advance where practicable. Continued use of the service after an update constitutes acceptance of the revised policy.
11. Contact us
Alder Meridian LLC
522 W Riverside Ave, Ste N
Spokane, WA 99201
Email: privacy@relationshipos.health