Version 2026-10-03 — between you (the Covered Entity) and Voice Referral (the Business Associate).
1. Purpose
You dictate referral information that may include protected health information ("PHI"). Voice Referral processes that dictation to transcribe it and generate a referral letter for your review and, when you request it, to check a patient's insurance eligibility with the patient's health plan, as permitted by HIPAA and the HITECH Act.
2. Permitted use
Voice Referral will use and disclose PHI only to perform the services you request, as required by law, or as you direct. PHI is never sold, used for advertising, or disclosed to any third party except subcontractors bound by equivalent agreements.
When you ask Voice Referral to check a patient's insurance eligibility, Voice Referral submits an electronic eligibility inquiry (a HIPAA standard 270/271 transaction) to the patient's health plan on your behalf, identifying you as the inquiring provider by your National Provider Identifier, and returns the plan's response to you. The inquiry carries only the patient and subscriber identifiers the plan requires, and the response is kept with your account for your use.
When you create a referral, Voice Referral may contact the provider or practice you are referring to. We may tell them a referral from you is on its way, deliver or offer to deliver the referral letter and its attachments, help coordinate the patient's appointment, and tell them about Voice Referral's services for receiving referrals. In doing so we may identify you as the referring provider. Patient information is shared with that office only as part of the referral you created, as a disclosure for treatment, and is never used to advertise to anyone.
3. Safeguards
Voice Referral maintains administrative, physical, and technical safeguards that reasonably and appropriately protect PHI, including encryption in transit and at rest.
4. Data minimization
Recordings you make are retained as part of the referral record: a voice memo you elect to include with a referral letter is kept with that letter so the designated recipient can listen to it. Referral letters not saved to an account — together with their recordings and attachments — are deleted within thirty days of creation.
5. Breach notification
Voice Referral will report to you, without unreasonable delay, any use or disclosure of PHI not permitted by this agreement, and any breach of unsecured PHI as required by 45 CFR §§ 164.400–414.
6. Subcontractors
Any subcontractor that creates, receives, maintains, or transmits PHI on behalf of Voice Referral agrees in writing to restrictions at least as protective as those in this agreement.
7. Access and termination
You may request return or deletion of PHI at any time. Upon termination, Voice Referral destroys retained PHI unless retention is required by law, in which case protections extend to the retained information.