Consumer Health Data Privacy Notice

Last Updated: July 13, 2026

This Consumer Health Data Privacy Notice (“ Notice”) applies to personal information defined as “consumer health data” subject to applicable state consumer health data law, including the Washington My Health My Data Act (“ MHMDA”).

This Notice supplements other applicable Evidation privacy notices. Additionally, research or other programs, including sponsored programs as well as services that feature our partners’ branding instead of or in addition to Evidation branding, facilitated by Evidation (“ Health Programs”) may be subject to terms provided in the specific informed consent and/or other disclosures for the relevant Health Program.

Consumer Health Data We Collect

The information we collect depends on how you interact with us, the services you use, and the choices you make. Because consumer health data is defined very broadly, many of the categories of information we collect are or could be considered consumer health data.

Such data may be categorized as follows:

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions).
• If you use third-party applications and services that collect biometric information and connect them to our services, we may obtain measurements of bodily functions, vital signs, or characteristics, including photographs, through those third-party applications and services.
• Information that could identify your attempt to seek health care services or information.
• Other information that may be used to infer or derive data related to health information.

Sources of Consumer Health Data

We collect personal information (which may include consumer health data) directly from you, from your interactions with our services, from third parties, and from publicly available sources.

Why We Collect and Use Consumer Health Data

Primarily, we collect and use consumer health data as reasonably necessary to provide you with the services you have requested or authorized. This may include delivering and operating the services and their features, personalization of certain service features, ensuring the secure and reliable operation of the services, troubleshooting and improving the services, and other essential business operations.

We may use consumer health data for other purposes for which we give you choices and/or obtain your consent as required by law.

Our Disclosure of Consumer Health Data

We may disclose each of the categories of consumer health data for the purposes described above. In particular, we may disclose personal information, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any service you have requested or authorized.

Third Parties to Which We Disclose Consumer Health Data

As necessary for the purposes described above, we disclose consumer health data to the following categories of third parties:

• Service Providers. Vendors or agents working on our behalf may access consumer health data.
• Affiliates. We enable access to consumer health data across any subsidiaries, affiliates, and related companies.
• Financial Institutions & Payment Processors. When you enter into a financial transaction, we will disclose payment and transactional data.
• Business Partners. We may disclose consumer health data to other companies where you use a service that is co-branded and jointly operated.
• Government Agencies. We will disclose consumer health data to law enforcement or other government agencies.
• Other Third Parties. It may be necessary to provide data to other third parties to comply with the law or protect our rights.
• Parties to a Corporate Transaction. We may disclose consumer health data as part of a corporate transaction or proceeding.

How to Exercise Your Rights

Applicable state consumer health data law may provide certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data. You can request to exercise such rights using the various tools and mechanisms described in the privacy notices.

If your request to exercise a right is denied, you may appeal that decision by contacting our Privacy Office. If your appeal is unsuccessful, you may be entitled to raise a concern or lodge a complaint with the Attorney General of your state.

Changes to this Notice

We will update this Notice when necessary to reflect changes in our services, how we use consumer health data, or the applicable law. Changes to this Notice will become effective when published, unless otherwise noted.

Contact Us

For any privacy questions, complaints, or inquiries regarding this Notice, please direct your inquiry to:

Evidation Health
Attn: Privacy Office
63 Bovet Rd #146
San Mateo, CA 94402
privacy@evidation.com