Publish Date: April 27, 2026 (what’s changed?)
Effective Date: April 27, 2026
Patient Rights & Requests
b.well is a health technology company that works with our customers to build connected health experiences for their consumer end users (“you”). These connected health experiences are centered on core foundation principles to protect your privacy.
This page explains these foundation principles, your privacy rights, and how to exercise them.
For simplicity, this discussion refers to a Connected App as any internet/web-based application or mobile app from b.well or a b.well customer that integrates with b.well for their consumer-facing experiences.
Foundation Principles: Transparency, Consent and Meaningful Choices
One of the foundation principles for consumer-centric connected health experiences is to be transparent about the data we collect, the reasons we collect it, and how it gets used and disclosed. That way, you can make informed choices, trusting that we will not use or share your health data in ways you don’t expect.
If you use a Connected App from a b.well customer, transparency is achieved through their terms of service and privacy policy and their consumer experience. For these Connected Apps, we commit to the Privacy and Security Statement for Enterprise Users and their End Users.
If you use a Connected App from b.well directly, transparency is achieved through our b.well Terms of Service and b.well Privacy Policy and the consumer experience in the b.well app.
In addition, if the Connected App gives you access to our b.well’s Smart Connect functionality, which allows you to more easily locate and retrieve your health data from different sources through a verified digital identity, the Smart Connect Terms also apply.
For clarity, the b.well Terms of Service and b.well Privacy Policy do not apply when you use a Connected App from a b.well customer.
Another foundation principle is to collect your consent before collecting certain types of information, or if material changes are made. As above, consent is collected through your Connected App, through a combination of acceptance of the Connected App’s terms and privacy policy, and individual consents given within the consumer experience.
Finally, you have a number of affirmative consumer privacy rights. These fall under the principle of enabling meaningful choices, and include the rights described below under Patient Rights At a Glance.
Patient Rights, at a Glance
You have different patient rights depending on where you live and the Connected App you use. b.well supports the following rights in its own privacy policy and data practices, and also supports its customers so they can help you exercise these rights:
- The right to access information we have retrieved on your behalf
- The right to download the retrieved information, in a readable format
- The right to request corrections in the retrieved information
- The right to request deletion of the retrieved information (except audit logs) unless prohibited by law
- The right to stop retrieving information from specific or all third party data sources
- The right to be notified of a suspected or actual security or privacy incident involving your retrieved information
- The right to submit questions about b.well’s privacy and data practices
How To Exercise These Rights
The best way to exercise your patient rights is to use the functionality available to you in the Connected App you’re using. This is also the most secure way of exercising your rights, because it allows you to take action as a validated user.
If you have trouble exercising these rights, we are here to help. Here are ways you can contact our Privacy Team.
Privacy Team
b.well Connected Health, Inc.
145 West Ostend Street, Suite 300
Baltimore, MD 21230
Phone: (855) 972-9355
E-mail: [email protected]
For awareness: if you are using a b.well application (governed by the b.well Terms of Service, including the b.well Privacy Policy), we will direct you to log into your b.well account to validate your identity, and use the Support feature to contact us about your request.
If you are using a Connected App that is offered by a b.well enterprise customer, it is governed by that customer’s terms and privacy policy, and you will not be able to log in with a b.well account. We will act on your request, but only at our customer’s direction, after you validate your identity with them.
TEFCA Required Disclosure: Bidirectional vs Retrieve Only Services
TEFCA requires b.well to disclose whether or not we support bidirectional services through TEFCA.
REQUEST-ONLY IAS PROVIDER: B.WELL DOES NOT PROVIDE BIDIRECTIONAL SERVICES THROUGH TEFCA. YOU WILL HAVE THE ABILITY TO REQUEST ACCESS TO YOUR HEALTH INFORMATION VIA TEFCA EXCHANGE. YOU WILL NOT BE ABLE TO USE B.WELL TO SHARE YOUR HEALTH INFORMATION WITH OTHER PARTICIPANTS IN TEFCA.
Revision History
| Effective Date | Link to prior version (as applicable) | Description |
| March 20, 2026 | https://www.icanbwell.com/legal/patient-rights-requests-march-2026/ | First published under the title “TEFCA Required Disclosures” |
| April 3, 2026 | Revised description of TEFCA Required Disclosures; republished under the title Patient Rights & Requests | |
| April 27, 2026 | New explanation about patient rights and handling of patient requests |
© 2026 b.well Connected Health. All rights reserved.