Please note: By submitting this form, you are scheduling a consultation. In the dropdown menu above, select Consultation only. “Follow-up” and “New Patient” options do not apply.
Please note: By submitting this form, you are scheduling a consultation. In the dropdown menu above, select Consultation only. “Follow-up” and “New Patient” options do not apply.
Effective Date: 11th November 2025
EvolveMD Concierge Medicine
Dr. Brian Donahue, MD
Chicago, Illinois
Describes how EvolveMD may use and disclose your protected health information (PHI) in accordance with HIPAA, HITECH, and Illinois law. Applies to all concierge services, including 24/7 direct access, telemedicine, and communications through the patient portal.
◉ Protected Health Information (PHI): Any individually identifiable health information transmitted or maintained by EvolveMD in any form or medium
◉ Concierge Medicine Services: Personalized healthcare services including direct physician access, comprehensive examinations, preventive care, and coordinated specialty referrals
◉ For Treatment: Providing medical care through the concierge model, 24/7 consultations via phone, text, or video, coordinating care with specialists, sharing info among our team, and providing acute and emergency consultations.
For Payment:
◉ Processing membership fees and billing for concierge services
◉ Billing insurance for covered services beyond membership benefits
◉ Collection activities for unpaid balances
◉ Processing payments for laboratory and imaging services performed outside our practice
For Healthcare Operations:
◉ Quality assessment and improvement of our concierge services
◉ Training medical staff in concierge medicine practices
◉ Evaluating physician performance and patient satisfaction
◉ Conducting research to improve healthcare delivery
◉ Compliance audits and regulatory reporting
In accordance with Illinois state law (225 ILCS 60/ Medical Practice Act):
◉ Mental health information requires separate written authorization
◉ Genetic testing information has additional protection requirements
◉ Patient access rights include electronic health record access within 15 days
◉ Breach notifications must comply with Illinois Personal Information Protection Act
24/7 Access Communications:
◉ Text message communications for medical advice and appointment scheduling
◉ Video consultations for acute care assessments
◉ Secure email communications through our patient portal
◉ Emergency contact protocols outside normal business hours
Membership-Related Disclosures:
◉ Sharing information necessary to provide concierge services
◉ Coordinating with outside laboratories and imaging centers
◉ Facilitating specialist referrals and coordinated care
◉ Processing membership renewals and service modifications
Telemedicine and Digital Health:
◉ Video consultation platforms and secure messaging
◉ Remote monitoring data and health analytics
◉ Digital health applications integrated with our services
◉ Cloud-based storage of health information with HIPAA-compliant vendors
Right to Access (Illinois Enhanced Rights):
◉ Inspect and copy your medical records within 60 days of request
◉ Obtain electronic copies in commonly used formats
◉ Direct transmission of records to third parties
◉ Fee restrictions per Illinois law for record copying
Right to Amend:
◉ Request corrections to your health information
◉ Response within 60 days as required by federal law
◉ Appeal process for denied amendment requests
Right to Restrict Disclosures:
◉ Request limitations on use and disclosure of your information
◉ Restrict sharing with family members or friends
◉ Limit communications about your care
Right to Confidential Communications:
◉ Request alternative methods of communication
◉ Specify preferred phone numbers or addresses
◉ Use secure messaging through patient portal
Right to Accounting of Disclosures:
◉ Receive list of disclosures. Right to Confidential Communications
◉ Request alternative methods of communication
◉ Specify preferred phone numbers or addresses
◉ Use secure messaging through patient portal
◉ disclosures made for purposes other than treatment, payment, or operations
◉ Covers a 6-year period prior to request
◉ Excludes certain routine disclosures
Right to Breach Notification:
◉ Notification within 60 days of discovery of any breach affecting your PHI
◉ Information about the breach and steps being taken to address it
We may disclose PHI without authorization when required by Illinois law:
◉ Suspected child abuse or neglect (325 ILCS 5/)
◉ Elder abuse reporting (320 ILCS 20/)
◉ Communicable disease reporting to IDPH
◉ Gunshot wound reporting to law enforcement
◉ Court orders and legal proceedings
We reserve the right to change this notice. Current notice is available on our website and in our office. We will post changes prominently and provide copies upon request.
We will not share or sell your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.
All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
As an Illinois patient, you have the right to:
◉ Receive respectful, considerate care
◉ Obtain information about your diagnosis and treatment
◉ Participate in decisions about your care
◉ Request a second opinion
◉ File complaints with the Illinois Department of Public Health
Privacy Officer: Dr. Brian Donahue, MD
Email: support@evolvemdchicago.com
Phone: (224) 985-9530
Illinois Department of Public Health Complaints:
Office of Health Care Regulation
525 W. Jefferson St., 5th Floor
Springfield, IL 62761
Federal Complaints:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201