Notice of Privacy Practices

Effective July 24, 2026  ·  LabX Diagnostic Systems, LLC  ·  CLIA #10D2067145

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who we are

LabX Diagnostic Systems, LLC is a CLIA-certified (CLIA #10D2067145) clinical and toxicology laboratory. We are a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and are required by law to protect the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

How we may use and disclose your health information

• Treatment. We perform laboratory testing ordered by your provider or employer program and report results to the ordering party and, where applicable, your treating clinicians.
• Payment. We may use and disclose PHI to bill and collect payment for testing services from you, an employer program, or a payer.
• Health care operations. Quality assurance, proficiency testing, accreditation, audits, and internal business operations.
• As required by law. Including public health reporting, court orders, and disclosures to health-oversight agencies.
• Business associates. We share the minimum necessary PHI with vendors (e.g., cloud hosting, e-signature, payment processing) who are bound by Business Associate Agreements to protect it.

Other uses and disclosures not described in this notice will be made only with your written authorization, which you may revoke at any time.

Your rights

• Request access to and a copy of your test results and other PHI we hold.
• Request an amendment of PHI you believe is incorrect or incomplete.
• Request an accounting of certain disclosures we have made.
• Request restrictions on certain uses and disclosures.
• Request confidential communications by alternative means or location.
• Receive a paper copy of this notice on request.
• Be notified in the event of a breach of your unsecured PHI.

Vantage AI, and the one thing we send outside

Vantage AI is an optional feature that explains your own results to you. It is off until you open it and choose Allow on the permission request — nothing is sent anywhere unless you ask it a question.

Who it is sent to. Your question is answered by a model operated by Anthropic, PBC (the Claude API). They are the only outside party any part of your result data is sent to for this feature.

What is sent. A de-identified extract of the panel you are asking about: marker names, your values and units, reference intervals, the laboratory’s flags, your sex, and an age band such as 40–49. Your typed question is sent, after we remove identifiers from it.

What is never sent: your name, email, phone number or address; your exact age; any record, order or accession number; and any date at all, including collection and release dates.

How it is collected and used. The result data comes from the laboratory record we already hold for you. It is used only to answer the question you asked, in that one exchange — your history is not replayed into later questions. Your questions and the answers are stored in our records, encrypted, so there is an accurate account of what was asked; only LabX staff can open them.

We hold no Business Associate Agreement with Anthropic, PBC. Rather than rely on one, we changed what is sent so that no protected health information leaves our systems. The full explanation, including exactly what is stripped, is here.

How Anthropic protects it. Anthropic, PBC receives this extract under its commercial terms for the Claude API, which do not permit it to use what we send to train its models, and it protects the data at least as carefully as we do. You can withdraw permission at any time from the Vantage AI page, and nothing more is sent after that.

Minimum necessary

We limit the use, disclosure of, and requests for PHI to the minimum necessary to accomplish the intended purpose.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact below, or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Changes to this notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have as well as any information we receive in the future. The current notice is posted on this website with its effective date.

← Back to home