PHI & HIPAA Practices for Business-to-Business Coordination
Effective Date: October 5, 2026
Phoenix Meds Inc. (“Phoenix Meds,” “we,” “us,” or “our”) provides business-to-business administrative and sourcing-coordination services to licensed healthcare organizations and medical professionals.
Phoenix Meds is not a patient-facing healthcare provider. We do not diagnose patients, establish treatment plans, prescribe medications, dispense medications, provide medical care, or make patient-specific clinical decisions.
Most information handled by Phoenix Meds relates to healthcare organizations and professionals, including business contact information, professional credentials, licenses, facility information, regulatory information, and administrative sourcing or coordination requests.
This page explains the limited circumstances in which Phoenix Meds may handle protected health information (“PHI”) while providing services to a healthcare organization. It is not a patient-facing HIPAA Notice of Privacy Practices and does not replace any notice a healthcare provider, pharmacy, health plan, or other covered entity may be required to provide.
1. Limited Handling of Protected Health Information
In limited circumstances, a healthcare organization may provide Phoenix Meds with patient-identifiable information, such as prescription information, when that information must be transmitted as part of an authorized coordination process with an appropriate pharmacy or other healthcare provider.
When Phoenix Meds creates, receives, maintains, accesses, or transmits PHI on behalf of a HIPAA-covered healthcare organization, Phoenix Meds handles that information in accordance with applicable HIPAA requirements and any applicable Business Associate Agreement (“BAA”).
Phoenix Meds does not independently use PHI to:
diagnose patients;
determine treatment;
determine whether a medication is appropriate for a patient;
issue or modify prescriptions;
direct prescribing decisions; or
direct a pharmacy’s professional dispensing decisions.
Clinical decisions remain the responsibility of appropriately licensed healthcare professionals. Pharmacy and dispensing activities remain the responsibility of the appropriately licensed pharmacy or other entity performing those activities.
2. General Website and Registration Forms
Phoenix Meds’ public website, clinic-registration forms, and general contact forms are intended for professional and business information.
These general forms should not be used to submit:
patient medical records;
patient names together with health information;
dates of birth;
diagnoses;
treatment records;
prescriptions; or
other patient-identifiable health information.
Where PHI is necessary for an authorized coordination activity, the healthcare organization should use only the transmission process designated by Phoenix Meds for that purpose.
3. Business Associate Relationships
Where Phoenix Meds handles PHI on behalf of a healthcare organization in circumstances that create a Business Associate relationship under HIPAA, Phoenix Meds and the applicable healthcare organization will address the handling of PHI through a Business Associate Agreement or other arrangement required by applicable law.
An applicable BAA may establish:
the services Phoenix Meds is authorized to perform;
permitted uses and disclosures of PHI;
safeguards for PHI;
security-incident and breach-reporting obligations;
requirements applicable to subcontractors that handle PHI;
applicable retention, return, or destruction requirements; and
other obligations required by law.
Phoenix Meds will use or disclose PHI only as permitted by applicable law and the applicable agreement governing the relationship.
This public page does not replace or modify an applicable Business Associate Agreement.
4. Safeguarding PHI
Phoenix Meds uses administrative, technical, and organizational safeguards designed to protect PHI that it is authorized to handle.
Access to PHI is limited to authorized purposes associated with the applicable coordination service.
Phoenix Meds does not use PHI received through these coordination activities for unrelated advertising or marketing purposes.
Where electronic PHI is handled in circumstances subject to HIPAA, applicable security requirements and contractual safeguards also apply.
Healthcare organizations should not transmit PHI through channels that Phoenix Meds has not designated for PHI-related communication.
5. Service Providers
Phoenix Meds may use technology providers, contractors, or other service providers to support its operations.
Where a service provider or subcontractor handles PHI on behalf of Phoenix Meds in circumstances subject to HIPAA, Phoenix Meds will require applicable contractual and privacy protections as required by law.
Service providers are not authorized to use PHI for unrelated purposes.
6. Relationship With Patients
Phoenix Meds does not maintain a direct treatment relationship with patients.
The patient’s clinic, prescribing healthcare professional, pharmacy, health plan, or other applicable healthcare entity remains responsible for the patient’s medical care, clinical decisions, medical records, and any HIPAA Notice of Privacy Practices that entity is required to provide.
A patient seeking access to, correction of, or other rights concerning medical records should generally contact the healthcare provider or other covered entity responsible for those records.
Where required by an applicable BAA or law, Phoenix Meds will assist the covered entity with obligations relating to PHI maintained by Phoenix Meds.
Nothing on this page creates a physician-patient, pharmacist-patient, or other healthcare-provider relationship between Phoenix Meds and any patient.
7. Relationship to Our Privacy Policy
Phoenix Meds maintains a separate Privacy Policy covering its general website and business data practices.
That Privacy Policy addresses information such as:
clinic and professional contact information;
professional credentials;
licensing information;
website forms;
cookies;
Google Analytics;
Google Search Console;
Bing Webmaster Tools;
Microsoft Clarity; and
general privacy requests.
This page applies only to the limited circumstances in which Phoenix Meds may handle PHI while providing an authorized business-to-business coordination service.
8. Changes to These Practices
Phoenix Meds may update this page to reflect changes in its services, data-handling practices, technology, contractual relationships, or applicable legal requirements.
When this page is materially updated, the effective date above will be revised.
Nothing on this page supersedes an applicable Business Associate Agreement or applicable law.
9. Contact Information
Questions regarding Phoenix Meds’ handling of PHI may be directed to:
Phoenix Meds Inc.
Attn: Privacy Contact
16700 US-280, Suite A-305
Chelsea, AL 35043
United States
Phone: +1 205-438-9194
Email: info@phoenixmedsinc.com