Interoperability: Member information

Medicare Advantage and Minnesota Health Care Programs members have more ways to see your health information in one place.

If you choose to, you'll be able to use a digital application (“app”) from another company (a “third party”) to see your health care and insurance info. You can do this even if you visit doctors in different clinics or have had insurance from different companies. Here are some things you should think about before you let a third-party application get to your health care data.

Important things to consider

It’s important for you to take an active role in protecting your health information. You should look for an easy-to-read privacy policy that clearly explains how the app will use your data. We do not have a recommendation for any particular app. If an app does not have a privacy policy, we advise you not to use it.

Please think about these questions too: 

• What health data will this app collect? Will it collect non-health data from my device, such as my location?
• Will it store my data in a de-identified or anonymous form?
• How will this app use my data? 
• Will this app give my data to third parties?
  • Will this app sell my data for any reason, such as advertising or research?
  • Will this app share my data for any reason? If so, with whom? For what? 
• How can I limit this app’s use and sharing or selling of my data?
• What security features does this app use to protect my data?
• How could sharing my data with this app affect others, such as my family 
• members?
• How can I get to my data and correct errors in data this app uses? 
• Does this app have a process for collecting and answering user complaints?
• If I no longer want to use this app, or if I no longer want it to have access to my health information, how do I end the app’s access to my data?
  • What is the app’s policy for deleting my data once I terminate access? Do I have to do more than just delete the app from my device?
• How does this app tell users of changes that could affect its privacy practices?

If the app’s privacy policy does not clearly answer these questions, you should reconsider using the app to access your health information. Health information is very sensitive. You should be careful to choose apps with strong privacy and security standards to protect it.

See a preview of the disclaimer and information disclosure authorization

Your rights under HIPAA

You have rights under the Health Insurance Portability and Accountability Act (HIPAA). The U.S. Department of Health and Human Services Office for Civil Rights enforces them with the HIPAA Privacy, Security and Breach Notification Rules, and the Patient Safety Act and Rule. Blue Cross is subject to HIPAA, as are most health care providers, such as hospitals, doctors, clinics and dentists.

Important: Most third-party apps will not be covered by HIPAA. Most third-party apps will fall under rule of the Federal Trade Commission (FTC) and the protections in the FTC Act. The FTC Act, among other things, protects against deceptive acts (for example, if an app shares personal data without permission, even though it has a privacy policy that says it will not). 

Find out more about patient rights under HIPAA and who needs to follow HIPAA
See a HIPAA FAQ
See FTC information on how to protect your privacy on apps 

Filing a complaint

If you believe an app has inappropriately used, disclosed or sold your information, you should contact the FTC. You may file a complaint with the FTC using the FTC complaint assistant.

You can also file a complaint with the Office for Civil rights.

You may also file a complaint with us by mail at:

Blue Cross and Blue Shield of Minnesota and Blue Plus
Attention: Privacy officer
PO Box 64560
St. Paul, MN 55165

Note: You can visit your app store to download one if you choose to use a third-party application. Blue Cross does not recommend or have an opinion on any third-party applications. If you choose to allow a third-party application to use your personal Blue Cross health information, you'll acknowledge that you understand and agree to a disclaimer and the information-sharing as part of the process.