Privacy policy

Last updated: 2026-06-18 | Effective: 2026-06-18

1. Who we are and our role

Center Health Incorporated ("Center Health", "we", "us", or "our") provides a remote patient monitoring ("RPM") software platform that healthcare providers use to monitor and support their patients. When we handle health information through that platform, we do so as a HIPAA Business Associate on behalf of the healthcare providers who use our services. We are not a covered entity, and we do not provide healthcare or sell products directly to consumers.

This Privacy Policy explains how we handle the general, non-health personal information we collect through our public websites and from people who contact us. It applies to Center Health and our related subdomains and applications, except for the protected health information described in Section 3, which is governed separately. This Privacy Policy applies only to websites, applications, and services on which it is posted, linked, or referenced. It does not apply to third-party websites, platforms, or services that are not operated by or on behalf of Center Health. 

2. What this policy covers

This Privacy Policy covers personal information we collect from and about: visitors to our websites; prospective and current healthcare-provider customers and the individuals who inquire about or administer our services; and people who communicate with us. It covers information such as contact details, inquiry and account information, and website usage data. Our websites or communications may contain links to websites or services operated by third parties. These links are provided for convenience only, and Center Health does not control and is not responsible for the privacy or data practices of third-party websites or services. We encourage you to review the Privacy Policy posted on any third-party website or service before providing personal information.

The following state-specific rights are included as addendums at the end of this Policy:

• California Residents’ Rights 
• Consumer Health Data Privacy (including Washington, Nevada, Connecticut)
• Nevada Opt-Out Rights

If you are visiting this site from a country other than the U.S., you recognize that your Personal Information may be processed within the U.S. and accordingly the protections afforded your Personal Information may be different than those you are entitled to within your country. By using our websites, you acknowledge this and agree to our processing of your Personal Information in this manner.

3. What this policy does NOT cover: your health information

If you are a patient whose healthcare provider uses Center Health for remote patient monitoring, the health information we process about you (your monitoring data, readings, and related records, together your "Protected Health Information" or "PHI") is not governed by this Privacy Policy. We handle that information solely as a Business Associate, under a Business Associate Agreement with your healthcare provider, and its use is governed by your provider's own Notice of Privacy Practices and by the HIPAA Rules. This Privacy Policy also does not apply to information collected through other channels where this Privacy Policy is not linked or referenced. 

To understand how your health information is handled, and how to exercise your rights over it, please contact your healthcare provider, whose Notice of Privacy Practices governs your health information. This Privacy Policy addresses only the non-health personal information described above.

4. Personal information we collect

• Contact and inquiry details: your name, email address, telephone number, mailing address, organization, role, and the contents of your message when you contact us or request information about our services.
• Account and access information: credentials and related metadata for authorized users of our provider portal and applications, such as username, login credentials, passwords, authentication information, and account settings (the health information accessed through those accounts is addressed in Section 3).
• Device and usage information: IP address, browser and device identifiers, device ID, online identifiers, pages viewed, links clicked, referring website, time spent on page, browser name and version, general location or geographic data, and other information about how you interact with our websites, applications, and services, collected through cookies and similar technologies.
• Communications: information you provide when you correspond with our team, including support and sales inquiries, feedback, survey responses, preferences, and other information you choose to provide.

5. How we collect it

We collect personal information directly from you when you visit our sites or contact us; automatically through your use of our websites and through cookies and similar technologies; and from service providers acting on our behalf. For example, you may provide information when you complete an online form, request information about our services, create or use an authorized account, respond to prompts or surveys, or communicate with our team. We may also receive technical information automatically from your browser or device, depending on your browser and device settings. 

6. How we use personal information

We use the non-health personal information described above to operate and improve our websites; to respond to your inquiries and provide information about our services; to administer authorized accounts; to personalize your access to our websites, applications, or services; to develop records regarding your requests, communications, accounts, or use of our services; to analyze, research, develop, and improve our websites, services, security controls, products, and content; to contact you with pertinent information about our services or important operational updates; to maintain the security and integrity of our systems and detect and prevent fraud or misuse; to enforce this Privacy Policy and other terms governing use of our websites or services; to protect someone’s health, safety, or welfare; to protect our rights or property; and to comply with applicable law and respond to lawful requests. We do not use this information to serve you targeted advertising, and we do not sell it.

7. How we disclose personal information

We disclose personal information only: to service providers who perform functions on our behalf (such as hosting, analytics, and communications) under contracts that require them to protect it; to healthcare providers or other parties you select or authorize, to the extent relevant to providing requested services and not otherwise governed as PHI; where you direct or consent to the disclosure; to comply with law or valid legal process, or to protect our rights, users, or systems; to prevent or investigate fraud, security incidents, or potentially unlawful activity; and in connection with a corporate transaction such as a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality protections. We do not sell personal information, and we do not share it with third parties for their own advertising or marketing.

8. Artificial intelligence and automated processing

Our platform includes AI features, including the Aria assistant, that operate within the services we provide to healthcare providers. Where those features process health information, they do so only under agreements that require HIPAA-level protection; we do not permit identifiable health information to be processed by any AI service that is not bound by such an agreement. Aria, our AI assistant, sends the information you provide in your conversations to OpenAI and Google to generate responses. These providers process this information solely to return Aria's responses to you and are contractually bound by Business Associate Agreements requiring them to safeguard your health information to the same HIPAA standard Center Health applies. They do not retain your data beyond what is needed to provide the service, do not sell it, and do not use identifiable health information to train general-purpose or public AI models.

To improve and evaluate our platform (including its analytics, error monitoring, product and algorithm development, and the AI and large-language-model components), we use de-identified data, from which identifiers have been removed in accordance with the HIPAA Privacy rule standards so that it no longer identifies any individual. We do not attempt to re-identify de-identified data, we do not disclose record-level de-identified data to third parties (only aggregate, population-level statistics), and we do not use identifiable health information to train any third party's general-purpose or public AI models. We do not sell personal information or health information. Once information has been de-identified, we may use and disclose it without restriction, although we commit that we will not attempt to re-identify such information, unless otherwise limited by applicable law or contractual obligations.

9. Cookies and analytics

Our websites use cookies and similar technologies to function, to remember preferences, and to understand how visitors use our sites. These technologies may help us collect information about pages visited, links used, time spent on our sites, browser and device information, and other usage information so that we can support site functionality, personalize your experience, improve our website and services, and maintain security. You can control cookies through your browser settings; disabling some cookies may affect site functionality. Center Health does not recognize Global Privacy Control (GPC) signals; however, we do not sell your Personal Information or share it for targeted advertising.

10. Legacy direct-to-consumer data (Center Duo and Center+)

Center Health previously offered direct-to-consumer services: Center Duo, a blood glucose meter service offered in the United States, and Center+, an international subscription application. These services have been discontinued and related subscriptions cancelled. Personal information collected under those prior consumer relationships continues to be handled in accordance with the terms under which it was collected, and is being retained only as long as needed for legitimate or legally required purposes before secure deletion. If you previously used Center Duo or Center+, you may export your own records through 3 October 2026, or request deletion of your legacy data; contact us using the details in Section 15 for assistance.

11. Security

We maintain administrative, physical, and technical safeguards designed to protect personal information, implemented through our Information Security & Privacy Program. We take reasonable precautions to provide a level of security appropriate to the sensitivity of information we collect. No system is perfectly secure, and we encourage you not to transmit sensitive information through unsecured channels. Although we use reasonable measures to help protect personal information against unauthorized use or disclosure, we cannot guarantee the security of information transmitted over the internet or stored in our systems and will not be responsible for breaches of security beyond our reasonable control. 

12. Retention

We retain personal information for as long as needed for the purposes described in this Privacy Policy, to maintain authorized accounts, to comply with our legal obligations, and to resolve disputes and enforce agreements, or as otherwise permitted or required by applicable law, after which we securely delete or de-identify it.

13. Your choices and rights

Depending on where you live, you may have rights to know about or confirm whether we process personal information about you, access, correct, or delete the non-health personal information we hold about you, to opt out of certain processing, to restrict or object to certain processing, to withdraw consent where processing is based on consent, to appeal certain decisions, and to receive a copy of that information in a portable format, where required by law. You may exercise these rights, or opt out of non-essential communications, by contacting us using the details in Section 15. We will verify your request as required by law and will not discriminate against you for exercising these rights. We may deny or limit a request where permitted by law, including where fulfilling the request would interfere with the privacy of others, conflict with legal or contractual obligations, or prevent us from maintaining information required for security, compliance, or legitimate business purposes.

These choices concern the non-health personal information covered by this Privacy Policy. Rights over your health information (PHI), including HIPAA rights of access, amendment, and accounting, are exercised through your healthcare provider; see Section 3 and your healthcare provider's Notice of Privacy Practices.

California residents. To the extent we handle medical information of California residents, the Confidentiality of Medical Information Act applies and is addressed through our HIPAA-aligned controls. Certain de-identified data we use for our own purposes may fall within the scope of the California Consumer Privacy Act; for that data we apply the HIPAA Safe Harbor method and commit not to re-identify it, consistent with the applicable standard. If California privacy law applies to personal information covered by this Privacy Policy, California residents may have additional rights, including the right to know, access, correct, delete, and opt out of certain sales or sharing of personal information, and the right not to be discriminated against for exercising those rights. Center Health does not sell personal information and does not share personal information with third parties for their own advertising or marketing purposes.

14. Children

Our websites are not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18 through them. If we learn that a child under 18 has provided personal information through our websites, we will take reasonable steps to delete it as quickly as possible. Monitoring services provided to a minor patient are arranged through that patient's healthcare provider and parent or guardian, and the related health information is handled as described in Section 3.

15. Changes and contact

We may update this Privacy Policy from time to time and will post the revised version with an updated date. Changes will apply to information collected after the revised policy is posted, unless otherwise stated or required by applicable law. Your continued use of our website or services after the revised policy is posted means that information collected after the posting will be subject to the revised policy. Questions about this Privacy Policy or our privacy practices, and requests relating to the non-health personal information it covers, may be directed to:

Center Health Incorporated

Privacy and security inquiries: security@center.health | Phone: 1-800-506-2301

555 O'Neill Ave., Suite 9, Belmont, CA 94002, USA

16. SMS / Text Messaging

Center Health sends text (SMS/MMS) messages only to support the remote patient monitoring service, on behalf of and at the direction of the healthcare provider who enrolled you. These messages may include enrollment and sign-in links, monitoring reminders, and other communications related to your care. They are service communications, not marketing or promotional messages.

How we obtain your consent. We send text messages only after consent has been obtained, either when you provide your mobile number or enroll through a text or QR-code link as part of your provider's monitoring program, or through the opt-in presented to you. Consent to receive text messages is not a condition of purchasing any product or service.

Message frequency and rates. Message frequency varies based on your monitoring program. Message and data rates may apply. Center Health is not responsible for charges your wireless carrier may apply.

How to get help or opt out. Reply HELP for help, or STOP to stop receiving text messages at any time. Because text messages support your monitoring, opting out may affect the service; please tell your healthcare provider if you opt out.

We do not sell or share your mobile information. Mobile phone numbers, text-messaging consent, and opt-in information are never sold and never shared with any third parties or affiliates for their marketing or promotional purposes. No mobile information is shared with third parties or affiliates for marketing or promotional purposes under any circumstances. We disclose this information only to the service providers who help us deliver text messages on our behalf under contracts that require them to protect it, and to the healthcare provider on whose behalf the messages are sent. Text messaging originator opt-in data and consent will not be shared with any third parties.

Text messages are not a fully secure channel, so the messages we send are limited and do not include sensitive health details. How we handle your health information is described in your healthcare provider's Notice of Privacy Practices.

State-Specific Sections

Addendum: California Residents’ Rights

California Consumer Privacy Act/California Privacy Rights Act

If you are a California resident, you have the rights set forth in this section. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. 

This Addendum applies only if and to the extent the CCPA and CPRA apply to Center Health. The CCPA applies to a business only if it meets at least one of the following thresholds: (a) annual gross revenue above the statutory threshold (USD 26,625,000, as adjusted for 2025); (b) annually buying, selling, or sharing the Personal Information of 100,000 or more consumers or households; or (c) deriving 50 percent or more of annual revenue from selling or sharing consumers' Personal Information. Center Health processes patient health information solely as a HIPAA Business Associate and does not sell or share Personal Information; where these thresholds are not met, the rights described in this Addendum may not apply.

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, defines Personal Information as information that identifies, relates to, or could reasonably be linked with you or your household. 

Please note that we may process some Personal Information as part of our provision of services to our customers. If we are processing your Personal Information as a service provider, you should contact the appropriate entity to address your rights.

If there are any conflicts between this section and any other provision of this Privacy Policy and if you are a California resident, the portion that is more protective of Personal Information will apply if there is a conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us via the contact information provided below.

Categories of Personal Information we collect and share

We may collect Personal Information as defined by the California Consumer Privacy Act (CCPA). See the chart below for categories of Personal Information from our California consumers:

• Collected within the last twelve (12) months from the sources listed in the Privacy Policy. 
• Shared within the last twelve (12) months with the third parties described in our Privacy Policy.

The examples provided above come from the CCPA and other statutes, as noted. They are reproduced here for your convenience to help you understand the types of information that are considered within each category. It is not meant to imply that we collect all such information listed in the examples. We only collect the specific pieces of Personal Information described in our Privacy Policy ("Personal Information").

Sensitive Personal Information We May Collect and Our Purposes for Collection and Use

The CCPA’s definition of sensitive personal information includes the following types of information:

• Social security number, driver’s license number, state identification card number, or passport number; 
• A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
• Biometric information processed for the purpose of identifying a consumer; and
• Health and medical information.

Right to Limit the Use of Sensitive Personal Information

California residents have the right to limit the use of sensitive personal information in some circumstances. Center Health only collects sensitive personal information, as defined by applicable California law, with your consent and only uses the sensitive personal information for the use disclosed at the time of collection. Center Health does not use sensitive personal information for inferring characteristics about you. Center Health will only use your sensitive personal information to provide you with the services you requested. Center Health does not share your sensitive personal information with third parties.

You can find a list of the categories and specific types of sensitive personal information that we collect in the chart above. We only collect and use sensitive personal information to provide you with products and services.

Use and sharing of personal information

We may use or disclose the Personal Information we collect for business or commercial purposes as described in the Privacy Policy. Including that we disclose your Personal Information for a business purpose to the following categories of third parties:

• Third-party vendors and service providers as described in our Privacy Policy;
• All other third parties described in our Privacy Policy.

We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising. You nonetheless have the right to opt out of any sale or sharing. Center Health does not recognize Global Privacy Control (GPC) signals; because we do not sell or share Personal Information for targeted advertising, there is nothing for such a signal to opt out of.

Your rights

By law if you are a resident of California, you have the following rights:

• The right to notice. You must be properly notified which categories of Personal Information are being collected and the purposes for which the Personal Information is being used.
• The right to opt out of any sale or sharing. Although Center Health does not sell or share Personal Information as those terms are defined in the CCPA, you may opt out. Center Health does not recognize Global Privacy Control (GPC) signals, but does not sell or share Personal Information for targeted advertising.
• The right to know about your Personal Information. You have the right to request and obtain from us information regarding our collection, use, and disclosure of the following data within the past twelve (12) months:
  • The categories of Personal Information collected
  • The sources from which the Personal Information was collected
  • The business or commercial purpose for collecting or selling the Personal Information
  • Categories of third parties with whom we share Personal Information
  • The specific pieces of Personal Information we collected about you
• The right to delete Personal Information. You have the right to request that we delete the Personal Information that we have collected about you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Information to provide you with our website or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request. 
• The right not to be discriminated against. We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. 

Exercising your rights

To exercise the rights described above, you or your Authorized Agent (defined below) may make a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Information, and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Information provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.

You may submit a Valid Request by e-mail (security@center.health) or toll-free telephone call (1-800-506-2301).

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may also authorize someone other than yourself (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this.

Do Not Sell or Share My Personal Information

Center Health does not sell or share Personal Information, and we do not use advertising partners or interest-based advertising technologies on our Site. We provide the opt-out mechanisms below for transparency and in case our practices change.

You may use the mechanisms below to record an opt-out preference.

Website

You can opt out of the sale or sharing of your Personal Information by following our instructions presented on our website at our “Do Not Sell or Share My Personal Information” link. If you submit a request through this link, you will be opted out of any sale or sharing of Personal Information. 

Please note that this opt-out is specific to the browser you use. You may need to opt out on every browser that you use and anytime you clear your browser’s cache.

Mobile Devices

No mobile opt-in data will be shared with third parties.

You can also stop the collection of location information from your mobile device by changing the preferences on your mobile device.

Global Privacy Control (“GPC”)

Center Health does not recognize GPC signals. Because we do not sell or share Personal Information as those terms are defined under California law, there is nothing for a GPC signal to opt out of.

California Online Privacy Protection Act (CalOPPA) "Do Not Track" Policy 

Our Site and the Services do not respond to Do Not Track signals. However, some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.

California's Shine the Light law

Under California Civil Code Section 1798 (California's Shine the Light law), California residents with an established business relationship with us are permitted to request information once a year about sharing their Personal Information with third parties for the third parties' direct marketing purposes. 

Center Health does not share Personal Information with third parties for these purposes. However, if you would like to request more information under the California Shine the Light law, and if you are a California resident, you can contact us.

Addendum: Consumer Health Data Policy 

(including Washington, Nevada, Connecticut)

Various U.S. state laws provide protections for “consumer health data”. This addendum applies to such information by applicable law. Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. 

“Consumer Health Data” is used in this addendum as it is defined in the Washington My Health My Data Act (MHMDA) and other laws applicable to the same or similar data. It generally includes any information that is linked or reasonably linkable to an individual and that identifies that individual’s past, present, or future physical or mental health status. Excluded from Consumer Health Data are certain types of health information, such as when we must collect, use, and disclose health information to meet our regulatory obligations or as part of a clinical trial. We do not collect, share, or sell Consumer Health Data except as described in this Privacy Policy and this Addendum or with your consent.

Center Health operates as a HIPAA Business Associate. Health information we process on behalf of healthcare providers is Protected Health Information governed by HIPAA and is excluded from Consumer Health Data under the MHMDA and comparable laws. Following the wind-down of our direct-to-consumer offerings, Center Health does not collect Consumer Health Data outside the HIPAA framework through its current services. The remainder of this addendum applies only to the extent any Consumer Health Data is collected outside that framework.

Categories of Consumer Health Data We Collect and Share

To the extent Center Health collects any Consumer Health Data outside the HIPAA framework, it could include the following categories: individual health conditions, treatment, diseases, or diagnosis; dynamics interventions, health-related surgeries or procedures; use or purchase of prescribed medication; bodily functions, vital signs and symptoms; diagnoses or diagnostic testing, treatment, or medication; genetic data; precise location information that could reasonably indicate a consumer’s attempt to acquire or receive health services or supplies (i.e., geofencing); and data that identifies a consumer seeking health care services. Not all health information we collect is considered Consumer Health Data, based on certain exemptions in applicable laws. For example, PHI protected by HIPAA is excluded from most Consumer Health Data laws.

Sources of Consumer Health Data

To the extent collected, we collect Consumer Health Data directly from you, for example when you submit information through a form on our website. 

How Center Health Uses Consumer Health Data

To the extent we collect any Consumer Health Data outside the HIPAA framework, we use it only to respond to your inquiries and to provide the information or services you request.

How Center Health May Share Consumer Health Data

To the extent we collect any Consumer Health Data, we may share it only with service providers acting on our behalf and with health care providers you select, as necessary to provide the services you or your authorized representative request. We do not sell Consumer Health Data.

Exercising Your Rights 

Based on applicable laws in your state, you may have the right to:

• Confirm whether Center Health is collecting, sharing, or selling Consumer Health Data concerning you and to access this data, including:
  • A list of all third parties and affiliates with or to whom Center Health has shared or sold the Consumer Health Data
  • Access an active email address or other online mechanism that you may use to contact these third parties
• Withdraw consent from Center Health to collect and share your consumer health data
• Request to have Consumer Health Data concerning you deleted and exercise that right by informing Center Health of your request for deletion
• Appeal if Center Health does not address an attempt to exercise one or more of these rights to your satisfaction

You may request that Center Health take the actions outlined in the paragraphs above to exercise rights you may have by submitting a request, at any time, to Center Health. Center Health will seek to respond within forty-five (45) days.

Addendum: Nevada Opt-Out Rights

Your Nevada Opt-Out Rights

We do not sell your Personal Information, but nevertheless we offer an opt out to sales of consumer data in an overabundance of caution as required by, and to ensure compliance with, Nevada law.  Verified requests under Nevada law (NRS 603A) to not make any sale of any covered information we have collected or will collect regarding a consumer, as defined in that law, may be sent to security@center.health. Please include in any such request email “Request for Nevada Opt-Out” in the subject line and in the body of the message.