Prescriber / MedVisit Privacy Policy and Terms Update Package

A. Prescriber Privacy Policy

1. Information We Collect From Prescribers

When you use the Prescriber / MedVisit app or related Mednow provider services, we may collect information from and about prescribers, nurse practitioners, physician assistants, or other providers, where applicable. This may include identity and contact information, professional credentials, licensing and insurance information, uploaded documents, banking or compensation-related documents, work preferences, scheduling and availability information, location information, electronic signature information, communications, and patient-care workflow information processed through the app.

We may collect this information directly from you, from your account profile, from documents you upload, from your use of app features, from Mednow operational systems, and from service providers or integrations where enabled.

2. Identity and Contact Information

We may collect identity and contact information such as your name, prefix, designation, email address, phone number, home phone number, date of birth, sex or gender, address, and languages spoken. We may use this information to create and administer your account, support onboarding, verify eligibility, communicate with you, operate provider workflows, maintain provider profiles, support scheduling and assignments, and comply with legal, regulatory, professional, audit, payment, tax/accounting, and operational requirements.

3. Professional Credentials and Licensing Information

We may collect professional credential and licensing information, including CPSO number, OHIP billing number, College of Family Physicians of Canada number, professional designation, current place of work, Family Health Organization status, assigned areas, preferred zones, and related professional profile information.

We may use this information to assess eligibility, verify or administer provider participation, support credentialing and professional review, manage billing and compensation workflows, assign or offer work opportunities, display or maintain provider records, and meet legal, regulatory, professional, audit, payment, tax/accounting, and operational requirements.

4. Insurance / CMPA / Professional Coverage Information

Where applicable, we may collect professional insurance or coverage information, including CMPA membership number, CMPA expiry date, CMPA proof of membership, or other professional coverage information. We may use this information to support onboarding, verify ongoing eligibility, confirm coverage status, manage provider records, and comply with legal, regulatory, professional, audit, payment, tax/accounting, and operational retention requirements.

5. Uploaded Documents and Images

You may be asked or permitted to upload documents, images, or files through the app or related provider workflows. These may include government ID, passport, driver’s licence, CMPA proof of membership, VOID cheque or banking document, CV or resume, credential documents, support documents, chat or support attachments, and other files you choose to provide.

We may use uploaded documents to verify identity, credentials, professional status, insurance or coverage, payment or compensation setup, provider eligibility, support requests, and operational administration. Uploaded documents may contain sensitive information. You should only upload documents that are requested or reasonably necessary for the relevant provider workflow.

6. Banking / VOID Cheque / Compensation Information

Where applicable, we may collect compensation-related information, including VOID cheque or banking documents, OHIP billing number, payment administration information, payout records, payment preferences, tax/accounting information, and related correspondence.

We may use this information to administer compensation, billing, payroll or contractor payment workflows, payout eligibility, payment reconciliation, tax/accounting processes, fraud prevention, support, dispute review, and other payment-related operations. Retention of this information may be subject to legal, regulatory, professional, audit, payment, tax/accounting, and operational retention requirements.

7. Work Preferences, Scheduling, Availability, and Location

We may collect work preferences and scheduling information, including work type preference, desired days per week, preferred working days, preferred start date, referral source or referred-by prescriber, preferred zones, assigned areas, availability entries, shift information, standby opportunities, appointment routes, route optimization data, start/end visit location, location-unavailable reasons, and related operational workflow information.

Where location features are enabled, we may collect or process approximate or precise location information to support visits, routing, route optimization, shift workflows, map display, current-location features, visit start/end validation, standby or assignment workflows, and operational support. Location collection and use may depend on your device settings, app permissions, and feature availability.

8. Signature and Prescription-Related Information

Where enabled, we may collect and store your electronic signature or signature-related data, including signature paths, signature timestamps, and related metadata. We may use this information to support prescription, clinical, or other authorized provider workflows.

We may also process prescription-related information associated with your use of the app, including prescriptions, medication details, prescription notes, signature status, prescribing workflow data, task notes, and related audit or operational records. Such records may be retained subject to legal, regulatory, professional, audit, clinical, payment, tax/accounting, and operational retention requirements.

9. Patient-Care Information Processed Through the App

The Prescriber / MedVisit app may allow prescribers to view, create, review, or update patient-care information. This may include appointments, patient details, visit workflow data, prescriptions, SOAP notes, task notes, asynchronous appointment review information, questionnaire responses, masked-call metadata, clinical decisions, and related support or operational information.

Prescribers are expected to handle patient-care information confidentially and in accordance with applicable privacy, health information, professional, and regulatory obligations. Mednow may process this information to operate the service, support clinical and operational workflows, maintain records, provide support, comply with legal and professional obligations, and support audit, safety, quality, payment, tax/accounting, and retention requirements.

10. Communications and Notifications

We may collect and process communications and notification-related information, including chat and support messages, attachments, call or masked-call metadata where enabled, notification preferences, push notification tokens, device identifiers, platform/provider information, account messages, support requests, and related timestamps.

We may use this information to provide support, route communications, deliver notifications, operate chat or messaging features, manage appointment, shift, payout, support, or workflow alerts, and maintain operational records. Push notifications may be delivered through service providers such as APNs, FCM, Expo notification services, or other providers where enabled.

11. Service Providers and Integrations

We may use service providers and integrations to operate the Prescriber / MedVisit app and related provider services. These may include backend hosting and storage providers, document storage or processing providers, payment or compensation processors, notification providers, map and location providers, address lookup providers, authentication or SSO providers, telephony or masked-call providers, support or communication providers, and other operational vendors.

Examples of integrations that may be relevant, where enabled, include Google Maps, Google Places, Apple Maps, APNs, FCM, Expo services, Google or Apple SSO, and backend systems used to store and process provider, document, scheduling, payment, and patient-care workflow data. Specific providers may change over time and should be confirmed before publication.

12. Account Access, Deactivation, Deletion Requests, and Retention

Prescriber accounts may be created, invited, activated, deactivated, suspended, or terminated through Mednow provider workflows. If you wish to request access, correction, deactivation, or deletion of your prescriber account or personal information, you may contact Mednow using the privacy contact information below or any other process Mednow makes available.

Deletion or de-identification may not be available for all records. We may retain information where required or permitted for legal, regulatory, professional, audit, clinical, payment, tax/accounting, fraud prevention, dispute, safety, quality assurance, contractual, and operational purposes. This may include provider credential records, uploaded documents, compensation records, signatures, prescriptions, patient-care records, appointment records, chat/support records, audit logs, and account records.

13. Security and Storage

We use administrative, technical, and organizational safeguards intended to protect prescriber, document, account, and patient-care information. These safeguards may include access controls, authentication, secure device storage for certain session information, encrypted communications where supported, signed or temporary document access links where enabled, operational logging controls, and role-based access processes.

No system is completely secure. You are responsible for protecting your device, account credentials, session access, and any information you download or access through the app. You should not share your account, session, password, or authorized electronic signature access with anyone.

14. Cross-Border / Service Provider Processing

Information may be processed or stored by Mednow, its affiliates, or service providers in Canada or other jurisdictions, where applicable. Information processed outside your province, territory, or country may be subject to the laws of that jurisdiction. Mednow may use contractual, technical, and organizational safeguards with service providers where appropriate.

15. Contacting the Privacy Officer

For privacy questions, requests, or concerns about the Prescriber / MedVisit app or provider information, contact Mednow’s Privacy Officer using the contact information approved by legal for publication.

• Email: pharmacy-privacy@mednow.ca
• Mailing address: 110-61 International Blvd, Etobicoke, ON M9W 6K4
• Additional process for provider account deletion/deactivation requests: Request deletion in app

B. Prescriber Terms of Use

1. Services Covered

These Prescriber / Provider Terms apply to your access to and use of the Prescriber / MedVisit app and related Mednow provider services, where applicable. These services may include provider onboarding, credential submission, document upload, scheduling, availability, route and location features, appointment workflows, patient-care workflows, prescription workflows, support communications, notifications, and compensation or payment administration features.

These Terms are intended for legal review and should be aligned with Mednow’s final provider agreements, privacy policy, professional obligations, and operational policies.

2. Prescriber Eligibility and Account Access

You may use the Prescriber / MedVisit app only if you are authorized by Mednow and, where applicable, licensed, registered, or otherwise authorized to provide the relevant professional services. You must be in good standing with applicable professional, licensing, regulatory, and credentialing bodies and must comply with all applicable laws, professional standards, policies, and Mednow requirements.

You are responsible for maintaining the confidentiality and security of your account, password, session access, device access, and any authentication method used with the app. You must not share your account, session, credentials, or access with another person.

3. Credential Accuracy and Ongoing Good Standing

You represent that the credential, identity, licensing, professional, billing, and profile information you provide is accurate, complete, current, and not misleading. This may include your name, contact information, CPSO number, OHIP billing number, CFPC number, professional designation, current place of work, FHO status, languages spoken, preferred zones, assigned areas, and any other provider information submitted through the app or related workflows.

You must promptly update Mednow if any information changes, expires, becomes inaccurate, or if your authorization, licence, registration, billing eligibility, professional standing, insurance, or ability to provide services changes.

4. CMPA / Professional Insurance Obligations

Where applicable, you must maintain required CMPA membership, professional insurance, liability coverage, or equivalent coverage required by law, professional standards, Mednow policies, or provider agreements. You must provide accurate and current membership, expiry, and proof-of-coverage information when requested and must promptly notify Mednow if coverage changes, lapses, is restricted, or is terminated.

5. Professional Conduct and Clinical Responsibility

You are responsible for your professional judgment, clinical decisions, documentation, prescribing decisions, patient interactions, and compliance with applicable law, professional standards, regulatory requirements, and Mednow policies. The app may support workflows, documentation, routing, communication, and operational administration, but it does not replace your independent professional obligations or clinical judgment.

You must use the app only for authorized purposes and must not misuse, alter, falsify, or improperly access patient, provider, credential, billing, payment, document, or operational information.

6. Patient Confidentiality and Privacy Obligations

You must keep patient information confidential and handle it in accordance with applicable privacy, health information, professional, and regulatory obligations. You must access, use, disclose, download, copy, or transmit patient information only as authorized and only as necessary for legitimate clinical, operational, support, billing, or compliance purposes.

You must promptly report suspected privacy incidents, unauthorized access, lost devices, compromised credentials, misdirected communications, or other security concerns through Mednow’s approved process.

7. User-Submitted Information and Documents

You are responsible for the accuracy, completeness, currency, and legality of information, documents, images, files, messages, and attachments you submit through the app or related provider workflows. This may include government ID, passport, driver’s licence, CMPA proof, VOID cheque or banking document, CV or resume, credential documents, support documents, chat attachments, and other uploaded materials.

You must not upload documents or information that are false, misleading, unauthorized, malicious, unlawful, or unnecessary for the relevant workflow. Mednow may review, use, retain, reject, remove, or request updated documents subject to applicable law, regulatory, professional, audit, payment, tax/accounting, and operational requirements.

8. Electronic Signature and Prescribing

Where electronic signature or prescribing features are enabled, you authorize use of your electronic signature for prescriptions, clinical documents, or other workflows you approve or initiate through the app. You are responsible for protecting your account, session, device, and signature access.

You must not allow any other person to use your account or electronic signature. You are responsible for reviewing prescriptions, clinical documents, medication information, patient information, and related records before signing or submitting them, and for ensuring that any prescribing or clinical action complies with applicable law, professional standards, and Mednow policies.

9. Scheduling, Availability, Routes, and Location Use

You are responsible for providing accurate and current availability, work preferences, preferred working days, desired days per week, preferred start date, preferred zones, assigned area information, and other scheduling-related information where applicable.

The app may use location, route, shift, standby, start/end visit, route optimization, and location-unavailable reason features to support scheduling, visits, routing, operational review, safety, quality, audit, and support. You must use these features honestly and in accordance with Mednow policies. Availability, standby, shift, cancellation, skip, and route expectations should be confirmed by legal/product and aligned with final provider agreements.

10. Compensation, Billing, VOID Cheque, and Payment Administration

Where compensation, billing, or payout features apply, Mednow may use provider information such as OHIP billing number, VOID cheque or banking documents, payment administration records, payout records, tax/accounting information, and related documentation to administer compensation, payment, billing, reconciliation, and related workflows.

Legal/product placeholder: final terms should specify applicable compensation model, provider classification, payout timing, eligibility, adjustments, deductions, overpayments, clawbacks, chargebacks, tax responsibility, invoicing, audit rights, disputes, and any refund or payment correction process.

11. Communications and Notifications

Mednow may send you service, operational, account, shift, appointment, support, payout, security, compliance, or other provider-related communications through the app, email, phone, push notifications, chat, or other channels where applicable. You are responsible for keeping contact information current and monitoring important provider communications.

You should not use support, chat, attachment, notification, or communication features for unauthorized disclosure of patient information, inappropriate content, harassment, spam, fraud, or non-workflow purposes.

12. Account Suspension, Deactivation, and Termination

Mednow may suspend, restrict, deactivate, or terminate access to the Prescriber / MedVisit app or related provider services where permitted by law, provider agreement, or Mednow policy. Reasons may include inaccurate or expired credentials, loss of good standing, expired authorization, insurance or coverage concerns, privacy or security breach, unsafe conduct, suspected fraud, misuse of the app, inappropriate access to patient information, failure to comply with professional obligations, or operational or legal requirements.

Suspension, deactivation, or termination does not necessarily delete records that Mednow is required or permitted to retain.

13. Retained Records and Compliance

Mednow may retain provider, credential, document, compensation, billing, signature, prescription, appointment, patient-care, chat/support, audit, account, and operational records subject to legal, regulatory, professional, audit, payment, tax/accounting, contractual, safety, quality, dispute, fraud prevention, and operational retention requirements.

You may request access, correction, deactivation, or deletion where available, but some records may need to be retained or may not be deletable where required or permitted by applicable law, professional obligations, audit requirements, payment/tax/accounting requirements, clinical record obligations, or Mednow’s operational needs.

14. Emergency / Not-for-Emergency-Use Disclaimer

The Prescriber / MedVisit app and related provider workflows are not intended for emergency use. The app should not be used as a substitute for emergency services, urgent clinical escalation pathways, or any required emergency response process. If there is an emergency or immediate risk of harm, users should contact emergency services or follow approved emergency escalation procedures.