Terms and Conditions

Effective Date: April 1, 2026

REQUEST-ONLY IAS PROVIDER: TROVE HEALTH DOES NOT PROVIDE BIDIRECTIONAL SERVICES. YOU WILL HAVE THE ABILITY TO REQUEST ACCESS TO YOUR HEALTH INFORMATION VIA TEFCA EXCHANGE. YOU WILL NOT BE ABLE TO USE TROVE HEALTH TO SHARE YOUR HEALTH INFORMATION WITH OTHER PARTICIPANTS IN TEFCA.

1. Overview

Trove Health Inc. ("Trove Health," "we," "us," or "our") is a participating Individual Access Services (IAS) Provider under the Trusted Exchange Framework and Common Agreement (TEFCA), as administered by the Office of the National Coordinator for Health Information Technology (ONC) and its Recognized Coordinating Entity (RCE).

This statement is published as a standalone notice in accordance with the IAS Provider Requirements Standard Operating Procedure (SOP) and is intended to formally inform both patients and healthcare providers of the nature and scope of Trove Health's participation in TEFCA.

2. Request-Only Provider Designation

TROVE HEALTH IS DESIGNATED AS A REQUEST-ONLY IAS PROVIDER. TROVE HEALTH DOES NOT PROVIDE BIDIRECTIONAL EXCHANGE SERVICES UNDER TEFCA.

This designation means the following:

-- You, as an Individual, have the ability to request access to your health information from other participants within the TEFCA network through Trove Health's platform.
-- You do not have the ability to use Trove Health to send, share, or disclose your health information to other TEFCA participants or third parties through TEFCA Exchange.
-- All data exchanges facilitated by Trove Health through TEFCA are strictly initiated by the Individual for the sole purpose of personal health information access.

3. Scope of TEFCA Exchange

All Uses and Disclosures of Individually Identifiable Information (III) performed by Trove Health through TEFCA are conducted strictly in accordance with:

-- The TEFCA Common Agreement;
-- The IAS Provider Requirements SOP v2.0 (July 1, 2024);
-- The Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules; and
-- All other applicable federal and state laws governing health information exchange.

Trove Health does not use, disclose, or exchange Individually Identifiable Information for any purpose beyond those expressly permitted under the above-referenced framework and applicable law.

4. Individual Rights

As an Individual using Trove Health's IAS, you retain the following rights in connection with TEFCA Exchange:

-- The right to request access to your health information held by participating TEFCA organizations;
-- The right to opt out of TEFCA Exchange at any time, prior to or following your first use of IAS;
-- The right to revoke your consent to the terms of Trove Health's Privacy and Security Notice at any time. For step-by-step revocation instructions, please visit: trovehealth.io/consent-revokation.

5. No Sale of Information

Trove Health expressly attests that it does not, and will not, sell Individually Identifiable Information at any time. Trove Health does not receive remuneration in exchange for Individually Identifiable Information, nor does it use such information for targeted advertising or any commercial purpose unrelated to the provision of Individual Access Services.

6. Governing Documents

This statement is to be read in conjunction with Trove Health's full Privacy and Security Notice, available at trovehealth.io/privacy-policy, which governs the complete terms of data collection, use, disclosure, and individual rights in connection with Trove Health's IAS.

7. Contact Information

If you have any questions or concerns about these Terms, please contact us at:

Trove Health, Inc.
Phone: +1 (415) 800-4442
Email: support@trovehealth.io
Website: www.trovehealth.io