Effective May 3, 2026 · Last updated May 3, 2026

Privacy Policy

Empower Medical Primary Care PLLC ("Empower Medical," "we," "us," or "our") operates a primary-care practice in Brooklyn, NY and the Empower Medical chronic-care-management ("CCM") software platform served at app.emprimecare.com. This policy explains what information we collect, how we use it, and the choices you have. It applies to this website (emprimecare.com), the CCM platform, and direct interactions with our practice.

1. Who we are

Empower Medical Primary Care PLLC is a New York professional limited liability company. Our principal address is 580 Crown St, Brooklyn, NY 11213. For privacy questions, contact info@emprimecare.com or (347) 770-0102.

Under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), we act as a Covered Entity for our own primary-care patients and as a Business Associate to other primary-care practices that license the CCM platform.

2. Information we collect

We collect information in three contexts.

This marketing website. When you visit emprimecare.com, our hosting provider records standard server logs (IP address, user agent, timestamp, requested URL). We do not run analytics or advertising trackers and we do not set non-essential cookies. Email or phone messages you send to us include the contents of those messages.
Empower Medical practice patients. If you receive care at our Brooklyn practice, we collect the protected health information ("PHI") needed to deliver care, including identifiers, clinical history, medications, vitals, and billing details. This is handled under our Notice of Privacy Practices, available on request.
CCM platform users. When a primary-care practice licenses our software, the practice's authorized users (physicians, care coordinators, administrative staff) create accounts. The platform processes that practice's patient PHI on the practice's behalf under a Business Associate Agreement ("BAA"). We log access events, edits, and time-tracked encounters for audit purposes.

3. How we use information

To deliver and document medical care to our own patients.
To operate, secure, and improve the CCM platform for licensed practices.
To bill for services and process payments.
To respond to your questions and to schedule visits or demos.
To meet legal, regulatory, and audit obligations (including CMS chronic-care-management documentation requirements).

We do not sell or rent personal information. We do not use PHI for marketing.

4. PHI handling and the BAA

The CCM platform processes patient PHI only on behalf of the licensing practice and only as permitted under that practice's BAA with us. We will sign a BAA before any PHI is exchanged. Practices retain ownership and control of their patient data.

PHI in the CCM platform is encrypted in transit (TLS 1.2+) and at rest (AES-256), scoped per practice (multi-tenant isolation), and access is logged. Database backups are encrypted and retained per CMS guidance. Production infrastructure runs on AWS in the United States.

5. Information sharing

We share information only:

With service providers (cloud infrastructure, email delivery, payment processors) under contracts that limit their use of the information.
With other clinicians, payers, or laboratories as part of treatment, payment, or operations under HIPAA.
If required by law, court order, or government request, after reasonable attempts to notify the affected practice or patient where legally permitted.
In connection with a corporate transaction (merger, acquisition, sale of assets), with continued protections.

6. Your choices and rights

If you are a patient at our practice or a patient whose practice uses the CCM platform, HIPAA gives you rights including access to your records, requests for amendment, an accounting of disclosures, and the right to file a complaint. Direct these requests to your practice; we will support the practice in responding.

For non-PHI information held about website visitors or platform users, you may contact info@emprimecare.com to access, correct, or delete your information.

7. Cookies and tracking

This website does not set non-essential cookies and does not include third-party analytics, advertising, or social-media trackers. Authenticated sessions on app.emprimecare.com use first-party session cookies that are required for the platform to function.

8. Children

This website is not directed to children under 13. The CCM platform is not used by patients directly. Pediatric patients receiving care at our practice are subject to the practice's Notice of Privacy Practices.

9. Security

We implement administrative, physical, and technical safeguards reasonable for a small healthcare technology operation: encryption, role-based access, audit logging, multi-factor authentication for administrative access, principle-of-least-privilege, and routine review of access. No system is perfectly secure; we will notify affected practices and individuals as required by HIPAA and applicable state law in the event of a breach.

10. Changes to this policy

We may update this policy as our practices evolve. The "Last updated" date at the top reflects the most recent revision. Material changes affecting CCM platform users or practice patients will be communicated through the platform or by direct notice.

11. Contact

Empower Medical Primary Care PLLC
580 Crown St
Brooklyn, NY 11213
Phone: (347) 770-0102
Email: info@emprimecare.com