Version 2026-07-31 — between you (the Covered Entity) and Voice Referral (the Business Associate).
1. Purpose
You dictate referral information that may include protected health information ("PHI"). Voice Referral processes that dictation solely to transcribe it and generate a referral letter for your review, as permitted by HIPAA and the HITECH Act.
2. Permitted use
Voice Referral will use and disclose PHI only to perform the services you request, as required by law, or as you direct. PHI is never sold, used for advertising, or disclosed to any third party except subcontractors bound by equivalent agreements.
3. Safeguards
Voice Referral maintains administrative, physical, and technical safeguards that reasonably and appropriately protect PHI, including encryption in transit and at rest.
4. Data minimization
Recordings you make are retained as part of the referral record: a voice memo you elect to include with a referral letter is kept with that letter so the designated recipient can listen to it. Referral letters not saved to an account — together with their recordings and attachments — are deleted within thirty days of creation.
5. Breach notification
Voice Referral will report to you, without unreasonable delay, any use or disclosure of PHI not permitted by this agreement, and any breach of unsecured PHI as required by 45 CFR §§ 164.400–414.
6. Subcontractors
Any subcontractor that creates, receives, maintains, or transmits PHI on behalf of Voice Referral agrees in writing to restrictions at least as protective as those in this agreement.
7. Access and termination
You may request return or deletion of PHI at any time. Upon termination, Voice Referral destroys retained PHI unless retention is required by law, in which case protections extend to the retained information.