Revoking access
You have the right to revoke access to your health information at any time. This guide explains how to withdraw your consent and manage your data with Flexpa.
#Your rights
When you use Flexpa to access your health information, you have the following rights:
- Access and export - Request a copy of the information we hold about you
- Revoke access and delete your data - Delete your data from Flexpa and disconnect every app you connected through Flexpa
- Opt out of sharing - Opt out of having your information shared through TEFCA
Flexpa does not charge any fees for accessing, exporting, or deleting your information.
#How to revoke access
There are several ways to revoke access to your health information:
#Option 1: Self-service (recommended)
The fastest way to revoke access is through our privacy portal:
- Visit privacy.flexpa.com and select Continue
- Verify your identity with CLEAR or ID.me. You'll need a government ID. Successful verification automatically submits your deletion request.
- Add an email address (optional) to receive a receipt and an update when processing is complete
#Option 2: Email request
You can request account deletion or exercise any of your data rights by emailing us:
Email: privacy@flexpa.com
Include the following in your request:
- Your full name
- Email address associated with your account
- The specific action you're requesting (revoke access, delete account, export data, etc.)
#Option 3: Phone request
You can also contact us by phone:
Phone: (707) 654-4982
#What happens after revocation
When you revoke access:
- Data deletion - Your personal information is deleted and your connected apps are disconnected within 45 days
- Confirmation - You'll receive confirmation that your request has been processed. If you used the privacy portal and provided an email address, we'll email it to you.
Some information may be retained if required by law or for audit purposes, but it will not be used for any other purpose.
#Data retention
After you revoke access or request deletion:
- Active accounts - Data is deleted within 45 days of your request
- Terminated accounts - Data is deleted within 45 days of termination
- Dormant accounts - If your account has no activity for over a year, data is deleted within 45 days of the dormancy period
#Withdrawing consent
By revoking access, you are withdrawing your consent for Flexpa to:
- Access your health information from connected health plans
- Store your personal health information on Flexpa servers
- Share your information with the application that requested the connection
Revoking access with Flexpa does not affect any data that has already been shared with third-party applications. Contact those applications directly to manage data they have received.
#Need help?
If you have questions about revoking access or need assistance:
For more information about how we handle your data, see our Privacy & Security Notice.