Privacy Policy

I. Purpose and Scope of this Policy

Providence Health & Services and affiliated entities, including Swedish Health Services (collectively, “Providence,” “we,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy (“Policy”) This Privacy Policy describes the types of personally identifiable information (“Personal Information”) we collect, how we use that Personal Information, with whom we may share it with, how we protect that information, and your legal rights in relation to your Personal Information. We are committed to abiding by this Policy, as well as the requirements of applicable laws, in providing our services.

This Policy applies to Personal Information we collect through any of our websites that link to this Policy (collectively, our “Sites”) as well as through our mobile application (the “Providence MyChart App”) and tools for online appointment scheduling, registration, purchases, payment and conversational AI (collectively, together with the Sites and Providence MyChart App, our “Services”) or through other communications you may have with us, whether online or otherwise.

This Policy does not apply to personal information Providence receives or creates about you that is “protected health information” (“PHI”) as defined in the Health Insurance Portability and Accountability Act (HIPAA). Our policies and practices with respect to your PHI, as well your privacy rights under HIPAA, are set forth in our HIPAA Notice of Privacy Practices (“NPP”), available here (for patients) or here (for Providence Health Plan (“PHP”) Members). The HIPAA NPPs, not this Policy, apply, for example, to information we collect from or about you when you:

  • Register (online or otherwise) for care at Providence hospitals or receive health care from any of the Providence health care providers;
  • Seek or receive PHP Member Services.

This Policy also does not apply to Personal Information collected from you when you conduct online searches or apply for employment opportunities at Providence, other than physician career opportunities. These employment search and application activities are provided by a third-party website operator and subject to a separate privacy policy, the Recruiting Privacy Policy | Oracle.

There may be circumstances in which you provide us with Personal Information (or give us access to such information) under special consents, such as if you enroll in a clinical trial we are conducting. In that case, the terms of the specific consent, to the extent it varies from this Policy, will apply rather than any inconsistent terms of this Policy.

Please review this Policy carefully. To the extent permitted by law, by providing us your Personal Data or otherwise interacting with us, you are agreeing to this Policy. If you do not agree with our policies and practices, it is your choice not to engage with us.

II. Personal Information We May Collect From or About You

We will collect the Personal Information you provide it to us, such as in responding to our web surveys, sending emails to us, engaging in online “chats” with live individuals or artificial intelligence, sending us text messages, or accessing resources through which we provide educational information and information about Providence point-of-care options, specific health care providers, physician career opportunities; and Providence events, activities and classes. The types of Personal Information we may collect from you include:

  • Contact information, such as your name, email address, phone number, and address;
  • Personal identifiers, such as date of birth, Social Security number, or other account numbers; 
  • Health information you share with us;
  • Usernames and passwords; 
  • Titles of videos you may watch on the Sites;
  • Pictures, audio, and video, such as recordings of calls we have with you or in the context of your attendance at events or functions we organize; 
  • Information you make available to us on a social media platform (such as by clicking on a social media icon linked from our Services), including usernames, posts, pictures, videos, and messages; 
  • Survey responses, reviews, and other user content stored or entered into the forms found in our Services; and  
  • Any other information you provide to us while using our Services. 

We may also obtain Personal Information about you from other sources, such as our business partners, business plans, the Internet, including social media websites; the press or other print media; and other organizations or individuals as permitted under applicable law.

Providence will not intentionally collect any Personal Information online from any person under the age of 13. You acknowledge that you must be 13 years or older to provide personal information to Providence through any of our online Services, and you represent that you are 13 years or older if you do so.

If you provide us with Personal Information related to anyone other than yourself (such as a patient or family member), please note that you are responsible for complying with all privacy and data protection laws prior to providing that information to Providence (including collecting consent, if required).

III. Information We May Automatically Collect if You Use Our Online Services

When you use our online Services, we also may automatically collect certain information about your interaction with the Services from the device you use to connect to the Services. This information may include your Internet protocol (“IP”) address, the URL of the website you just came from, the browser version your computer is currently using, and/or Urchin Tracking Module (“UTM”) parameters (text in a URL that indicates a web visit but does not persist to track movement across websites over time).

We also collect limited information about your use of our online Services through cookies, which are small bits of information that are stored by your device’s web browser and are classified as identifying files sent to a computer by a web server. Websites read these uniquely identifying files for future access and enable servers to associate devices to user profiles.

The cookie banner on our Sites and Providence MyChart App requires that you decide if and how your device will accept our cookies that are not essential to the operation of the Sites/App. Note that if you choose to reject our non-essential cookies, you may not be able to use certain services or features on the Sites/App.

IV. App-Specific Information Collection

If you use the Providence MyChart App (which supports our health care services, not health plan services), you will have the option to use features that will require you to give the app access to your location data. One such feature is to help you find healthcare providers near you. Another such feature is location‐based check‐in for in‐person appointments. The first time you try to use any such features that need access to your location data, we will ask for your consent within the app and will only access your location data if you provide your consent. You do not have to provide consent if you do not want to allow the Providence MyChart App to use your location. We do not store the location data the Providence MyChart App uses when providing you with location-based features.

You may also use the Providence MyChart App to interact with your Personal Information within the Providence MyChart portal (which includes your PHI if you are a Providence patient), so that you will have the opportunity to use certain features of the Providence MyChart App, such as participating in video visits with your providers or mobile appointment check‐in. The first time you try to use any of these features, we will ask for your consent for activating that feature within the app, and we will not activate any feature without your consent.

The Providence MyChart App is developed by Epic Systems Corporation; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways Epic may interact with your information to make your use of the Providence MyChart App possible.

If you are a Providence patient, the Providence MyChart App will use your cell phone number to send an SMS text message for you to confirm your phone number.

V. How We May Use Your Personal Information

We may use the Personal Information we collect from you for a variety of purposes permitted by law, including:

  • To provide our products and services;
    • To provide you with information about our products and services;
  • To communicate with you, including for market research purposes, in response to your inquiries, and to fulfill your requests;
  • To improve the functionality and content of our Services, including customizing the Services to your preferences;
  • To evaluate, recruit, and hire personnel;
  • For our data analysis, product development, and internal research purposes;
  • To diagnose problems with our server or administer our Site, App, or other Services;
  • To prevent fraud, including by confirming your identity;
  • To maintain and upgrade the security of any data or information collected from you or others;
  • To comply with legal and regulatory obligations and to exercise or defend against legal claims;
  • For risk management and compliance purposes, including to comply with law enforcement and other legal processes;
  • For any other purpose you may agree to at or before the time the Personal Information is collected from you.

VI. When and With Whom We May Share Personal Information

We may disclose the Personal Information that we collect as follows:

  • At your request, such as to a health care provider whom you may wish to visit;
  • To our service providers, whom we engage to assist us with technology support, operational support and other forms of assistance, and whom we bind by contract to protect the confidentiality and security of the Personal Information we share with them;
  • To any company legally affiliated with Providence, as related to the uses of Personal Information described in Section III above.
  • In the event of a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our company or its assets, to the proposed or actual acquiring party or assignee; and
  • As we believe to be appropriate: (i) when required by applicable law, including laws outside your country of residence; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities; (iv) to enforce the terms and conditions for use of the Site, including this Policy; (v) to protect and defend our rights and property; (vi) to protect the interests of Providence or others; and (vii) to permit us to pursue available remedies or limit the damages that we may sustain.

We do not sell Personal Information or provide Personal Information to third parties for their use for their own direct marketing purposes.

VII. Health Plan Services

As indicated above, this Policy applies to Personal Information collected through our Providence Health Plan website, other than the myProvidence portal that health plan members may access here. Personal Information about health plan members is subject to our health plan NPP. The descriptions in this Policy of how we use, share, and otherwise process information from and about users of our Services generally encompass our practices with respect to information collected through the PHP Site, although the purposes and functionality of the PHP Site differ in many respects from those of our other Sites.

VIII. Data Retention; Security

We will retain Personal Information about you for the period necessary to fulfill the purposes outlined in this Policy. We endeavor to use reasonable organizational, technical, and administrative measures to protect the Personal Information we maintain within our organization. However, any device or application connected to the Internet is susceptible to a security breach, despite the level of administrative, technical, and physical safeguards employed. By using our Services, you accept this risk.

IX. International Data Transfers

Providence is located in the United States. Our Services are directed only at customers in the United States. If you are accessing our Services from outside of the United States, please be aware that your Personal Information that is collected by us, as described above, may be transferred to, stored, or processed in the United States, where applicable privacy laws may differ from those of your jurisdiction.  Providence transfers Personal Information to jurisdictions outside of the United States only as permitted by applicable law and regulations.

X. Links to Other Websites

Our Site may provide links to third-party websites. When you click on one of these links, you will be accessing content that is not subject to this Policy. We are not responsible for the information-collection practices of the other websites that you visit, and advise you to review their privacy policies before you provide them with any Personal Information.

XI. Rights You May Have Regarding Your Personal Information.

Depending on the laws of the jurisdiction in which you reside, you may have one or more of the following rights with respect to some or all of your Personal Information:

  • To request a description of (i) the categories of Personal Information we have collected about you, (ii) the categories of sources for the Personal Information we have collected about you, (iii) our purpose for collecting that Personal Information, and (iv) a list of the third parties and affiliates with whom we have shared your Personal Information and an active email address or other online mechanism that you may use to contact these third parties;
  • To request access to the Personal Information we have collected about you;
  • To request that we correct any inaccuracies in your Personal Information;
  • To request that we delete your Personal Information;
  • To opt-out of or request that we limit the processing of your sensitive Personal Information;
  • To withdraw any consent you have provided for us to collect, use, or share your Personal Information, to the extent that consent was required for us to undertake such collection or sharing;
  • To appeal a decision made in response to any of the above-referenced requests.

If you wish to exercise any of these rights with respect to your Personal Information, please submit a request to us by either:

  • Emailing us at: privacy@providence.org
  • Calling us at our Privacy Rights toll-free number: 1-888-294-8455
  • Writing to us at the address provided at the end of this Policy.

We will not discriminate against you for exercising any of the rights to which you are entitled.

You may make a request on your own behalf and, if you are the parent or guardian of a minor child, you also may make a request related to your child’s Personal Information. You may also designate an authorized agent to make a request on your behalf, in which case, you must provide us with a signed declaration stating that you permit that individual to act on your behalf and stating such individual’s full name, address, email address, and phone number. We may, after receiving your request, require additional information from you to verify your or your designated agent’s identity in order to protect your Personal Information from unauthorized disclosure or deletion at the request of someone other than you or your legal representative. We cannot grant your request if we cannot verify your identity or authority to make the request.

Please be aware that we are not obligated to grant all requests that you may make, depending on applicable law. For example, we may deny a request for deletion of Personal Information if we have a legal basis for retaining that information. If your request is denied, you may appeal that decision by writing to our privacy support team at the email address or postal address provided above. Within 45 days of receiving your appeal request, we will inform you in writing of any action taken or not taken in response, along with a written explanation of the reasons in support of the response. Depending on the state in which you reside, you may have the right to contact your state attorney general if you have concerns about the result of the appeal or would like to submit a complaint. If this right is available to you, we will provide you with instructions on how to do so.

We endeavor to respond to a verifiable request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing.

XII. Changes to This Privacy Policy

We reserve the right to revise this Policy from time to time. We will alert you when material changes have been made by posting a notice at the home pages of both our Providence Health Services and PHP websites, indicating the date this Policy was last updated. It is recommended that you periodically revisit this Policy to learn of any changes.

XIII. How to Contact Us

If you have any questions regarding this Policy or wish to make a complaint about how we process your Personal Information, please contact us as indicated below and we will handle your request as soon as possible. Even if you make a complaint to us, you may always lodge a complaint with the relevant authority in your location.

  • Email: privacy@providence.com
  • Phone: 1-888-294-8455
  • Postal Mail: Providence Health & Services Office of Legal Affairs
    1801 Lind Avenue SW, Suite 9016
    Renton, WA 98057-9016

Last Updated: August 17, 2026