Privacy and Security Policy
This RxResults website or application has been designed to comply with the Health Insurance Portability
and Accountability Act of 1996 (HIPAA), as well as the subsequent privacy and security rules, which
establish standards for the privacy of individually identifiable health information; also, commonly known
as protected health information, or PHI. We have implemented security procedures on this website or
application in an effort to protect your personal health information. It has always been the policy of
RxResults to protect the confidentiality of personal health information.
Protected Health Information (PHI) is defined as health information, including demographic data
collected, which permits identification of an individual or could reasonably be used to identify that
individual. It includes information regarding the diagnosis, medical treatment, care, advice or counseling
of an identified member, the physical or mental condition of the member, or prescription drug therapy
for an individual.
RxResults is a Business Associate of your health or prescription plan as defined by the HIPAA regulations.
RxResults has executed a legal agreement with your health plan which defines RxResults as a Business
Associate of the plan.
How we collect your personal information
RxResults receives prescription claim data, medical claims data, and demographic information from
entities such as your health plan carrier, prescription benefit manager, third party administrator, or other
health care entity as authorized by your health plan or employer and as allowed by HIPAA business
associate agreements. Demographic information provided about you may include identity information
such as your name, address, date of birth, gender, etc. The demographic information may sometimes
include your social security number, email address and phone number. RxResults also collects personal
information voluntarily disclosed or entered by you such as your email address and telephone number.
In addition to your personal information, RxResults may automatically gather generic data or information
from your web browser and/or your internet connection used to access the RxResults website or
application. Examples of such collected information include: the internet protocol (IP) address used to
connect your computer to the Internet; computer and connection information such as browser type and
version, operating system, and platform; the Uniform Resource Locator (URL) path to, through, and from
our website; mouse clicks, mouse movements, and scrolling activity; non-personally identifiable
information entered by you while using the RxResults website or application; and the date and time you
access our website.
If RxResults combines your personal information with non-personal information, the combined
information will be treated as personal information as long as it remains combined.
How we use your personal information
RxResults uses your personal information to communicate with you and to display medication information
that is tailored for you based on your prescription history. Your personal information is secure and may
only be accessed by you through a valid login; by RxResults employees as needed to support your use of
the RxResults website or application; or possibly by sub-contracted third parties that perform business
services on the behalf of RxResults (subcontractors are also Business Associates as defined under HIPAA).
All RxResults employees and sub-contractors are HIPAA-trained and tested and are not allowed to disclose
your personal information other than as authorized.
RxResults does not sell or rent your personal information. RxResults may be required by law to disclose
your personal information under certain circumstances.
Data is transferred from RxResults information systems to you during a "secured session" using secure
socket layer (SSL) 256-bit encryption technology and transport layer security (TLS) 1.2. SSL is the industry
standard security protocol for encoding sensitive information and works by creating a shared digital key,
which allows only the sender and receiver of the transmission to code and decode the information.
Transport layer security (TLS) is a protocol that ensures privacy between communicating applications and
you on the internet. If your web browser does not support 256-bit encryption, you should download the
most current version.
Most web browsers have a method to visibly display whether you are using a website secured by SSL
technology. This visible display is commonly presented by the presence of a padlock or key typically in or
near the URL address bar at the top of the web browser window.
RxResults websites or applications may make use of web/internet cookies. Cookies are small pieces of
information or data sent to your web browser from a web server and stored on your computer's storage
device for record‐keeping purposes. RxResults uses this information to analyze traffic patterns and
improve our website. If your web browser is not configured to allow cookies, this RxResults website may
not function properly or function at all. Please refer to the help feature of your web browser to learn how
to configure your web browser to accept cookies.
Once you have established your password through the registration process, you are responsible for
keeping your password private. To maintain the security of your information, do not share your password
with anyone. If you give your username or password to others, you assume responsibility for possible
unauthorized access. If you suspect the privacy of your username or password has been compromised,
please either change your password immediately or contact RxResults.
Your rights to review and request changes to your personal information
If you think the personal information RxResults has collected about you is inaccurate, you may send a
written request for review and changes to RxResults at the following address:
- MyRxGuidance Member Services
- 320 Executive Ct, Ste 201
- Little Rock, AR 72205
Upon request of your PHI in RxResults’ possession, RxResults will provide requested PHI in a Designated
Record Set as available in RxResults records (electronic or paper). Only those data elements requested by
you shall be disclosed to you. A Designated Record Set means a group of records maintained by RxResults
consisting of one or more of the following types of information:
- Medical claims and payment records about you,
- rescription claims and payment records about you,
- Information about your health plan or prescription plan enrollment, and
- Other information used to make decisions about you (i.e., provider chart notes, communications, etc.).
If requesting a change to your PHI, RxResults will investigate your request and make changes if warranted
or allowed. It is important to note that much of the data RxResults collects is from your health plan.
Therefore, some of your demographic information will need to be updated by your health plan rather
than by RxResults. Once updated by your health plan, the updated information will be passed to
Links to other websites
This website may contain links to other websites that may have online information practices or privacy
and security policies different from RxResults. RxResults is not responsible for the privacy and security
practices of those websites, and we encourage our visitors to review the privacy and security practices of
RxResults welcomes your questions or comments regarding this RxResults website/application or
RxResults’ privacy and security practices. Please write to:
- MyRxGuidance Member Services
- 320 Executive Ct, Ste 201
- Little Rock, AR 72205
Website support questions may be directed to RxResults’ call center at (501) 687-9531, or via email to
To protect your privacy, please do not use email to communicate information to RxResults that you
consider confidential. Email is not a secure method of communication and is not encrypted unless using
special encryption email technology. Accordingly, an unencrypted email message potentially could be
accessed and viewed by others without your knowledge and/or permission while in transit to RxResults
If you contact RxResults, RxResults team members will use reasonable measures to verify the identity and
authority of any individual requesting information about you. You may also request a copy of RxResults’
Policy and Procedures for Verification of Identity and Authority (HIPAA Policy #: P1.9).
Regularly change your password.
Do not share your password with anyone.
Sign out or log off the RxResults website or application; and close your web browser when done.