HIPAA & Confidentiality Statement

Our confidentiality commitment

Information you share with Xzora Solutions is kept confidential and used only to provide the support you asked for. We do not sell, trade, or publicly share client information, and we never use client details in marketing, testimonials, or examples.

Our HIPAA status

HIPAA applies to covered entities such as healthcare providers, health plans, and clearinghouses, and to their business associates. Xzora Solutions provides private-pay navigation, education, and support services, does not bill insurance, and does not provide clinical care, so it is generally not a HIPAA-covered entity.

That does not lower our standard. We apply HIPAA-aligned confidentiality practices to the information we hold, and we will sign a business associate agreement where one is genuinely required.

Email and web forms are not secure

Our email address and website form are not HIPAA-secured channels. Please keep the following out of email and web submissions:

• Diagnoses, conditions, symptoms, and clinical notes.
• Medication names, dosages, and medication lists.
• Test results, imaging, and discharge paperwork.
• Insurance, Medicare, or Medicaid identifiers.
• Social Security numbers and financial account details.

How to share sensitive details safely

Share clinical details during your scheduled session, by phone, or in person. Use the contact form only for your name, how to reach you, and general context such as the setting you are coming from and the kind of help you need.

How we safeguard your information

• We collect the minimum information needed to help you.
• Access is limited to the people working directly on your request.
• Records are stored on access-controlled systems and retained only as long as needed.
• We do not discuss your situation with family members or providers without your permission.

Written authorization

If you would like us to speak with a provider, facility, pharmacy, or plan on your behalf, we will obtain your written authorization first and share only what you approve. You can withdraw that authorization at any time.

Limits to confidentiality

We may need to disclose information when required by law, when responding to a valid legal request, or when there is a serious risk of harm to you or someone else. In an emergency we may direct you to 911 or emergency services.