Expedient Doctor Portal Mobile App Terms of Use and Privacy Policy

Last Updated: 6/4/26

1. Who We Are; Scope of This Document

These Expedient Doctor Portal Mobile App Terms of Use and Privacy Policy (this “Policy” or these “Terms”) govern access to and use of the Expedient Medicolegal Services mobile application, related mobile features, portals, content, case-document access tools, training resources, and any related services that link to or incorporate this Policy (collectively, the “App”).

Expedient Medicolegal Services is the trade name/DBA of Steiner Registry Inc., a California corporation (“Expedient,” “we,” “us,” or “our”). The term “Authorized Doctor User,” “you,” or “your” means a physician, medical expert, qualified medical evaluator, agreed medical evaluator, independent medical evaluator, specialist, or other doctor who has been approved by Expedient to access the App for internal professional, case-review, administrative, training, or continuing education purposes.

The App may be made available through Apple App Store, Google Play, private distribution, managed device distribution, enterprise distribution, or another authorized distribution channel. Regardless of the distribution method, the App is restricted to Authorized Doctor Users only.

2. Description of the App and Services

The App is an internal-use platform made available only to Authorized Doctor Users who work with, are engaged by, or are otherwise approved by Expedient in connection with Expedient’s medicolegal operations. The App is not intended for use by patients, claimants, members of the public, attorneys, employers, insurers, adjusters, vendors, or other third parties unless Expedient has expressly authorized such access in writing.

The App may allow Authorized Doctor Users to securely access assigned case-related documents, medical records, referral materials, appointment or evaluation information, administrative notices, training materials, continuing education resources, internal policies, onboarding materials, and other content made available by Expedient. The App is intended to support case review, professional education, training, and internal administrative coordination.

The App does not itself provide medical care, legal advice, diagnosis, treatment, claims administration, or any guarantee of a particular medical opinion, legal result, claim outcome, settlement, award, or benefit. Any professional opinions, evaluations, reports, testimony, or services prepared by a doctor remain the responsibility of the applicable professional, subject to applicable laws, professional standards, contractual obligations, and any separate written agreement with Expedient.

Access to the App and its features may vary based on user role, authorization level, case assignment, device, operating system, jurisdiction, service availability, and Expedient’s internal policies. Expedient may modify, limit, suspend, or discontinue any App feature at any time, including to protect confidentiality, comply with legal or professional requirements, or maintain the security and integrity of case documents, training materials, and other information accessible through the App.

3. Acceptance of Terms and Professional Responsibility

By downloading, installing, accessing, logging into, or using the App, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, or if you are not an Authorized Doctor User, you must not access or use the App.

You represent and warrant that you are authorized to use the App, that all registration and credential information you provide is accurate and current, and that you will use the App only for legitimate professional purposes related to Expedient-approved case work, training, or continuing education.

You remain solely responsible for your professional judgment, licensure, medical opinions, evaluations, reports, conclusions, testimony, and compliance with applicable medical, workers’ compensation, privacy, confidentiality, evidentiary, and professional standards. The App is an administrative and information-access tool; it is not a substitute for independent professional review or judgment.

4. Eligibility; Restricted Access

The App is restricted to Authorized Doctor Users who are at least 18 years of age, are licensed or otherwise qualified as required for their professional role, and have been issued or approved for App credentials by Expedient. You may not use the App if your access has been suspended, revoked, expired, or terminated.

You agree to notify Expedient promptly if your professional license, certification, QME/AME/IME eligibility, board certification, malpractice coverage, contractual authorization, or other relevant professional status changes in a way that may affect your ability to perform services, access case materials, or use the App.

You may not share, transfer, sublicense, sell, delegate, or permit another person to use your App account, credentials, authentication code, device, session, or downloaded materials. Expedient may require multifactor authentication, single sign-on, device management, biometric unlock, password rotation, or other access controls.

5. Account Security; Authorized Devices; Account Deactivation and Deletion

You are responsible for maintaining the confidentiality and security of your username, password, multifactor authentication method, device passcode, and any other credentials used to access the App. You must promptly notify Expedient if you suspect unauthorized access, credential compromise, loss or theft of a device, improper disclosure of case documents, or any other security incident.

Expedient may require that the App be used only on devices that meet security requirements, such as current operating-system versions, encryption, screen lock, remote-wipe capability, and malware protection where applicable. Expedient may restrict or disable access from jailbroken, rooted, compromised, unsupported, unmanaged, or otherwise insecure devices.

You may request account deactivation or deletion by contacting Expedient using the information in Section 41 or through any in-app or web-based account deletion method that Expedient makes available. Because the App supports regulated medicolegal operations and may involve case records, PHI, audit logs, legal holds, contractual records, training records, and compliance documentation, Expedient may retain information as required or permitted by law, contract, professional obligation, security need, dispute resolution, or business necessity. Account deactivation or deletion does not require Expedient to delete case records, medical records, audit logs, or other records that Expedient is legally or operationally required to maintain.

6. Confidentiality; Case Documents; PHI

Case documents, medical records, referral materials, reports, correspondence, exhibits, claims information, appointment information, and other case-related materials available through the App are confidential and may include Protected Health Information (“PHI”), medical information, workers’ compensation information, personally identifiable information, legal or claim-related information, and other sensitive or restricted information.

You agree to access case documents only for cases assigned to you or otherwise authorized by Expedient, and only for the professional purpose for which access was granted. You must use the minimum amount of information necessary for the authorized purpose and must not access, browse, search, download, copy, export, print, photograph, screenshot, forward, upload, summarize, disclose, or retain case materials except as expressly authorized by Expedient, your separate written agreement, and applicable law.

You must not store case documents or PHI in personal email accounts, personal cloud storage, unsecured devices, consumer messaging apps, unapproved transcription tools, unapproved artificial intelligence tools, external drives, or any other location or service not approved by Expedient. You must not use PHI or case documents to train, prompt, test, or operate any third-party AI, machine-learning, summarization, transcription, translation, or analytics system unless Expedient has expressly approved that use in writing and all required privacy, security, and contractual safeguards are in place.

Your confidentiality obligations survive termination of App access, termination of your relationship with Expedient, completion of a case, or deletion of the App from your device.

7. Training and Continuing Education Materials

The App may provide access to training materials, internal guidance, onboarding materials, practice resources, videos, presentations, assessments, continuing education materials, or other educational content. These materials are provided for internal professional education and quality-improvement purposes only.

Unless a material expressly states that it is accredited and specifies applicable credit criteria, completion requirements, accrediting body, and credit amount, the App does not guarantee continuing medical education, continuing education, QME/AME-related credit, board credit, certification, licensure credit, or any other professional credit.

Training and education materials may summarize policies, workflows, laws, regulations, or professional expectations, but they are not legal advice, do not replace applicable statutes, regulations, official guidance, professional standards, or your independent judgment, and may not address every circumstance that may arise in a case.

8. User Submissions; Records; Feedback

If the App allows you to submit acknowledgments, attestations, responses, training answers, profile updates, credentials, documents, notes, messages, reports, or other content (“User Submissions”), you represent and warrant that your User Submissions are accurate, complete, lawful, and appropriate for the purpose submitted.

As between you and Expedient, you retain ownership of materials you submit to the extent you owned them before submission. You grant Expedient a limited, worldwide, royalty-free license to receive, store, host, process, reproduce, display, transmit, use, and disclose User Submissions as necessary to operate the App, administer cases, provide training, maintain records, comply with law, enforce these Terms, protect security, and perform any applicable agreement with you.

If you provide feedback, ideas, suggestions, or recommendations about the App or Expedient’s services, you agree that Expedient may use them without restriction or compensation, provided that Expedient’s use of such feedback will not include PHI or confidential case materials except as permitted by law and applicable agreement.

9. Intellectual Property and Limited App License

The App, software, design, interface, workflows, training materials, internal policies, text, graphics, logos, images, videos, audio, code, documentation, and other content made available through the App are owned by Expedient or its licensors and are protected by copyright, trademark, trade secret, and other intellectual property laws.

Subject to your compliance with these Terms, Expedient grants you a limited, revocable, non-exclusive, non-transferable, non-sublicensable license to install and use the App on an authorized device solely for Expedient-approved internal professional purposes. You may not copy, modify, adapt, translate, reverse engineer, decompile, disassemble, distribute, rent, lease, sell, sublicense, create derivative works from, or otherwise exploit the App or App content except as expressly permitted by applicable law or written permission from Expedient.

No rights are granted except those expressly stated in these Terms. All rights not expressly granted are reserved by Expedient and its licensors.

10. App Store and Platform Terms

Your use of the App may also be subject to the rules, terms, and policies of Apple, Google, your mobile carrier, your device manufacturer, and any applicable mobile-device management provider or distribution platform. If you download the App from the Apple App Store, Google Play, or another app store or distribution service, those third parties are not parties to these Terms and are not responsible for the App, case documents, training materials, support, maintenance, privacy practices, or claims related to the App, except to the extent required by their own terms or applicable law.

For App Store users, these Terms are between you and Expedient, not Apple. Apple has no obligation to provide maintenance or support services for the App. To the extent required by Apple’s terms, Apple and its subsidiaries are third-party beneficiaries of these Terms and may enforce the provisions applicable to the App against you after your acceptance of these Terms.

For Google Play users, these Terms are between you and Expedient, not Google. Google is not responsible for the App or its content, and your use of the App must comply with applicable Google Play terms and policies.

11. Device Permissions; Notifications; Mobile Functionality

The App may request access to certain device features only as needed for App functionality. Depending on the version and configuration of the App, these may include internet access, device identifiers, push notifications, file/document access, camera or photo access for document upload if enabled, biometric unlock using device-level authentication, and security or crash-reporting features.

Unless expressly enabled in a specific feature, the App is not intended to require access to your contacts, precise GPS location, microphone, calendar, call logs, SMS messages, or unrelated personal files. If a future App feature requires a new permission, the App or platform may request permission before access is granted.

You are responsible for managing device permissions through your device settings. Disabling certain permissions may limit App functionality. Push notifications may include administrative or security alerts; Expedient will use reasonable efforts not to include unnecessary PHI in push notifications, but you should configure your device lock screen and notification settings to protect confidentiality.

12. Prohibited Conduct

Unauthorized access. You may not access or attempt to access cases, documents, systems, accounts, materials, or data for which you have not been authorized.
Credential sharing. You may not share credentials, allow another person to use your account, bypass authentication, or defeat security controls.
Improper disclosure. You may not disclose, copy, download, export, screenshot, photograph, print, forward, post, or store PHI, case documents, training materials, or confidential information except as expressly authorized.
Unapproved tools. You may not upload App content, PHI, case materials, or confidential information to unapproved AI systems, cloud services, email accounts, messaging platforms, storage tools, analytics services, or transcription services.
Security interference. You may not introduce malware, scrape, crawl, overload, interfere with, reverse engineer, or attempt to compromise the App or Expedient systems.
You may not impersonate another person, misrepresent your credentials, falsify training completion, or provide inaccurate professional or account information.
Illegal or unethical use. You may not use the App in violation of law, workers’ compensation rules, privacy obligations, professional standards, court orders, subpoenas, confidentiality obligations, or any agreement with Expedient.

13. Monitoring, Audit Logs, and Security Controls

To protect case materials, PHI, confidential information, and App integrity, Expedient may monitor App access and use, maintain audit logs, record login attempts, track case-document access, monitor downloads or attempted downloads, collect device and security information, and investigate suspicious activity. You should have no expectation that your App use, access logs, training completion records, or App-related messages are private from Expedient, except as provided by applicable law.

Expedient may suspend, restrict, revoke, or terminate App access immediately if Expedient believes there has been unauthorized access, a security risk, misuse of information, a violation of these Terms, a change in eligibility, a legal or professional concern, or a need to protect case documents or App systems.

14. Electronic Communications

By using the App, you consent to receive electronic communications from Expedient, including administrative notices, security alerts, case-related notifications, training notices, policy updates, account communications, and updates to these Terms or the Privacy Policy. Electronic communications satisfy any legal requirement that a communication be in writing to the maximum extent permitted by law.

You are responsible for keeping your contact information current and for configuring your device, email, and notification settings to receive important communications while protecting confidential information from unauthorized viewing.

15. Third-Party Services and Links

The App may link to or integrate with third-party services, such as identity management, hosting, cloud storage, scheduling, document management, analytics, crash reporting, learning management, video hosting, app-store services, or mobile-device management providers. These third parties may have their own terms and privacy practices.

Expedient is not responsible for third-party websites, applications, services, or content that are not controlled by Expedient. You should review applicable third-party terms and privacy policies. Expedient will use reasonable efforts to engage service providers that support the confidentiality, security, and operational needs of the App.

16. No Emergency Use; No Reliance on Completeness of App Materials

The App is not intended for emergency medical use, real-time patient care, urgent communications, or time-critical clinical decision-making. Do not use the App to seek or provide emergency assistance.

Case materials available through the App may be incomplete, updated, supplemented, corrected, replaced, or withdrawn. You are responsible for reviewing the materials made available for your assigned case, confirming whether additional information is needed, and following applicable professional procedures for requesting missing or supplemental records.

17. Disclaimer of Warranties

The App and all App content are provided on an “as is” and “as available” basis. To the maximum extent permitted by law, Expedient disclaims all warranties, express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, security, and uninterrupted or error-free operation.

Expedient does not warrant that the App will be available at all times, that all case materials will be complete or current, that training materials will satisfy any professional credit requirement unless expressly stated, or that the App will be free from defects, malware, interruptions, delays, or unauthorized access.

18. Limitation of Liability

To the maximum extent permitted by law, Expedient and its directors, officers, employees, contractors, agents, licensors, service providers, and affiliates will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenues, data, goodwill, business opportunity, professional opportunity, or other intangible losses arising out of or related to the App, these Terms, App content, training materials, case materials, or your use of or inability to use the App.

To the maximum extent permitted by law, Expedient’s total liability for all claims arising out of or related to the App or these Terms will not exceed the greater of (a) the amount you paid directly to Expedient for use of the App in the 12 months preceding the event giving rise to the claim, or (b) one hundred dollars ($100). Some jurisdictions do not allow certain exclusions or limitations, so some of the above limitations may not apply to you.

19. Indemnification

You agree to indemnify, defend, and hold harmless Expedient and its directors, officers, employees, contractors, agents, licensors, service providers, and affiliates from and against any claims, liabilities, damages, losses, costs, and expenses, including reasonable attorneys’ fees, arising out of or related to: (a) your use or misuse of the App; (b) your violation of these Terms; (c) your unauthorized access, use, retention, or disclosure of PHI, case documents, or confidential information; (d) your User Submissions; (e) your professional services, evaluations, opinions, reports, testimony, or conduct; or (f) your violation of applicable law, professional standards, or third-party rights.

This indemnification obligation survives termination of these Terms and termination of your App access.

20. Suspension; Termination; Effect of Termination

Expedient may suspend, restrict, or terminate your App access at any time with or without notice if Expedient believes that continued access may present a security, privacy, legal, professional, operational, or contractual risk, or if your authorization to use the App ends.

Upon termination or expiration of your access, you must stop using the App and must return, delete, or securely destroy App materials in your possession or control as directed by Expedient, except to the extent retention is required by law or a separate written agreement. Termination does not affect obligations that by their nature should survive, including confidentiality, privacy, intellectual property, indemnification, limitations of liability, dispute resolution, and record-retention obligations.

21. Changes to the App or These Terms

Expedient may update the App or these Terms from time to time to reflect operational changes, legal requirements, security needs, app-store requirements, or changes to Expedient’s practices. The updated version will be identified by an updated “Last Updated” date or other notice method.

Your continued access to or use of the App after updated Terms are posted or otherwise made available constitutes acceptance of the updated Terms. If you do not agree to updated Terms, you must stop using the App and notify Expedient.

22. Dispute Resolution; California Law

These Terms and any dispute arising out of or relating to these Terms, the App, App content, App access, training materials, or your relationship with Expedient concerning the App will be governed by the laws of the State of California, without regard to conflict-of-law rules.

Before initiating a formal proceeding, you and Expedient agree to attempt in good faith to resolve disputes informally by contacting the other party. If the dispute is not resolved within 30 days after written notice, either party may pursue available remedies, subject to any arbitration, forum-selection, or dispute-resolution provisions in a separate written agreement between you and Expedient.

Unless a separate written agreement requires arbitration or another forum, any dispute that is not resolved informally will be brought exclusively in the state or federal courts located in Los Angeles County, California, and each party consents to personal jurisdiction and venue there. Nothing in this section prevents either party from seeking temporary, preliminary, or permanent injunctive or equitable relief to protect confidential information, PHI, intellectual property, security, or App access.

PRIVACY POLICY

23. Privacy Overview

This Privacy Policy explains how Expedient collects, uses, discloses, retains, and protects information in connection with the App. Because the App is restricted to Authorized Doctor Users, the information we collect generally relates to physician account administration, professional credentials, App security, case-document access, training and continuing education activity, communications, and audit logging. The App may also provide access to case documents that contain PHI, medical information, workers’ compensation information, and other sensitive information about claimants or other individuals.

Expedient is committed to handling information in accordance with applicable privacy and security laws, which may include HIPAA, the California Confidentiality of Medical Information Act (“CMIA”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), California data-breach laws, workers’ compensation requirements, contractual obligations, and professional standards, as applicable.

24. Categories of Information We May Collect

Depending on your role, App configuration, device, and use of the App, Expedient may collect the following categories of information:

Name, email address, phone number, mailing address, username, account ID, professional ID numbers, device identifiers, IP address, authentication identifiers, and similar identifiers.
Professional and credential information. Medical license information, specialty, board certification, QME/AME/IME status, curriculum vitae information, practice affiliation, employer or entity affiliation, malpractice coverage information, training status, onboarding status, and other information needed to verify eligibility or administer the professional relationship.
Account and security information. Login credentials, multifactor authentication data, account settings, security questions if used, device authorization status, failed login attempts, session data, access tokens, audit logs, and security alerts.
App usage and electronic network activity. Log files, App interactions, case-document access history, pages/screens viewed, training modules accessed, completion status, timestamps, clickstream or navigation data, crash reports, performance data, browser or device type, operating system, mobile carrier, app version, and similar technical information.
Case-access information. Records showing which assigned case materials, documents, reports, or training items you accessed, viewed, downloaded if permitted, acknowledged, commented on, or otherwise interacted with.
Messages, support requests, contact forms, emails, call notes, notices, administrative communications, and other communications between you and Expedient.
User Submissions. Profile updates, credentials, attestations, acknowledgments, training answers, reports, documents, notes, and any other content you submit through the App.
Sensitive personal information. Information that may be considered sensitive under California law, such as account login credentials, professional license identifiers, precise geolocation if ever enabled, and information concerning health when contained in case documents or communications. The App may provide access to PHI or medical information about claimants or other individuals; such information is handled under applicable health privacy, confidentiality, and case-record requirements.
Limited inferences related to security, user role, training progress, or App usage, such as whether a user has completed required training or whether access activity appears unusual.

25. Sources of Information

We may collect information from the following sources:

Directly from you. For example, when you register, authenticate, update your profile, submit credentials, complete training, send communications, acknowledge policies, or provide documents.
From Expedient and its personnel. For example, when Expedient assigns cases, configures user roles, uploads training materials, verifies credentials, or documents communications.
From clients, referrers, attorneys, insurers, claims administrators, healthcare providers, or other case participants. For example, when case materials are provided to Expedient and made available to you for an assigned case.
Automatically from the App and your device. For example, when the App records logins, audit logs, device information, usage data, permissions, crash reports, or security events.
From service providers. For example, hosting providers, identity-management providers, app-store platforms, crash-reporting tools, learning-management systems, document-management systems, and security providers may provide information needed to operate, support, secure, or improve the App.

26. Purposes for Collecting and Using Information

Expedient may use information for the following business, operational, legal, and professional purposes:

To verify identity, eligibility, professional credentials, and authorization to use the App.
To create, administer, secure, support, deactivate, or delete App accounts.
To provide access to assigned case documents and internal materials.
To administer training, onboarding, continuing education content, assessments, acknowledgments, and completion records.
To communicate with Authorized Doctor Users about App access, cases, security, training, policy updates, support, and administrative matters.
To maintain audit logs, monitor access, detect unauthorized activity, protect PHI and confidential information, investigate incidents, and enforce security controls.
To comply with HIPAA, CMIA, CCPA/CPRA, California data-breach laws, workers’ compensation requirements, subpoenas, court orders, regulatory requirements, legal holds, professional standards, and contractual obligations.
To maintain, troubleshoot, test, improve, and develop the App and related systems.
To protect Expedient, Authorized Doctor Users, claimants, clients, case participants, and the public from fraud, misuse, unauthorized access, security threats, and unlawful activity.
To enforce these Terms, administer agreements, resolve disputes, and preserve legal rights.

27. Disclosure of Information

Expedient may disclose information as reasonably necessary for the purposes described in this Policy and as permitted or required by law. Categories of recipients may include:

Service providers and business associates. Vendors that host, process, secure, support, analyze, or maintain the App or related systems, including cloud hosting, identity management, document management, learning management, security, analytics, crash reporting, communications, and app-distribution providers. Where required for PHI, Expedient uses appropriate Business Associate Agreements or other contractual safeguards.
Expedient personnel and authorized representatives. Personnel and representatives who need information to administer cases, manage doctor access, provide training, operate the App, verify credentials, support users, or maintain security.
Case participants and clients. Where permitted or required, information may be disclosed to attorneys, insurers, claims administrators, healthcare providers, agencies, courts, or other authorized case participants in connection with assigned case work, reports, evaluations, legal processes, or professional obligations.
Legal, regulatory, and compliance recipients. Courts, regulators, government agencies, law enforcement, auditors, professional boards, or other recipients when required by subpoena, court order, law, regulation, legal process, or to protect rights, safety, confidentiality, or security.
Corporate transaction recipients. If Expedient is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be disclosed as part of that transaction subject to appropriate confidentiality and legal safeguards.
With your direction or consent. We may disclose information when you direct us to do so or consent to the disclosure, subject to applicable law and case restrictions.

28. HIPAA, CMIA, and Medical Information

Case documents available through the App may include PHI and medical information subject to HIPAA, CMIA, workers’ compensation confidentiality rules, court or agency rules, contractual confidentiality obligations, or other legal requirements. Expedient implements administrative, technical, and physical safeguards designed to protect such information.

Authorized Doctor Users must comply with all applicable privacy and confidentiality obligations when accessing or using PHI or medical information through the App. You must report suspected unauthorized access, disclosure, loss, compromise, or misuse of PHI or medical information to Expedient immediately using the contact information in Section 41 or any incident-reporting method Expedient provides.

To the extent there is a conflict between these Terms and a separate Business Associate Agreement, Qualified Medical Evaluator agreement, independent contractor agreement, medical expert agreement, client agreement, court order, subpoena, or applicable law, the more protective or legally controlling obligation will govern.

29. Sale, Sharing, Targeted Advertising, and Marketing

Expedient does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are used under California privacy law. The App is not intended to display third-party behavioral advertising or to use case documents, PHI, medical information, or professional information for targeted advertising.

If Expedient materially changes these practices, it will update this Policy and provide any legally required notices, choices, or opt-out mechanisms before engaging in such practices.

30. Cookies, SDKs, Analytics, and Similar Technologies

The App and related web resources may use cookies, software development kits (SDKs), local storage, analytics, crash-reporting tools, device identifiers, and similar technologies to authenticate users, maintain sessions, prevent fraud, secure the App, remember preferences, measure performance, diagnose errors, support training features, and improve App functionality.

Expedient requires that App privacy disclosures, App Store privacy labels, and Google Play Data Safety disclosures be kept accurate and consistent with actual App practices, including data collected by third-party SDKs or service providers.

31. Data Security

Expedient uses administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. These safeguards may include encryption in transit and at rest, access controls, multifactor authentication, role-based permissions, audit logs, vendor due diligence, incident response procedures, secure hosting, and workforce confidentiality obligations.

No system or method of transmission is completely secure. You are responsible for doing your part to protect information, including maintaining device security, using secure networks, avoiding public or shared devices, promptly installing security updates, logging out when appropriate, protecting credentials, and reporting incidents immediately.

32. Retention and Deletion

Expedient retains information for as long as reasonably necessary to fulfill the purposes described in this Policy, operate the App, administer professional relationships, provide case-document access, maintain training and completion records, satisfy legal and contractual obligations, resolve disputes, enforce agreements, protect security, and comply with record-retention requirements.

Retention periods vary by data type and context. Case records, medical records, PHI, audit logs, access records, legal records, and professional records may be retained for periods required or permitted by HIPAA, CMIA, California law, workers’ compensation rules, court or agency requirements, legal holds, applicable contracts, and Expedient’s record-retention policies. Account data that is no longer needed may be deleted, de-identified, archived, or retained in a restricted form as appropriate.

If you request deletion of your App account or personal information, Expedient will process the request subject to legal, regulatory, contractual, security, professional, and operational exceptions. Deletion of a doctor user account does not require deletion of case records, PHI, audit logs, training records, security records, legal records, or other information that Expedient must or may retain.

33. International Processing

Expedient primarily intends to use United States-based operations and service providers for App-related information. However, some service providers may process, access, support, or store information through systems or personnel located outside California or outside the United States. When information is processed outside its original jurisdiction, Expedient uses reasonable safeguards designed to protect the information consistent with this Policy and applicable law.

34. California Privacy Rights

If you are a California resident, you may have rights under the CCPA/CPRA, subject to applicable exceptions. These rights may include the right to know what personal information we collect, use, disclose, sell, or share; the right to access specific pieces of personal information; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of sale or sharing; the right to limit certain uses or disclosures of sensitive personal information; and the right not to be discriminated against for exercising privacy rights.

The CCPA/CPRA includes exemptions and exceptions, including for certain medical information, PHI, employment-related information, business-to-business information, legal obligations, security needs, and information that must be retained to complete transactions, detect security incidents, protect against illegal activity, exercise legal rights, or comply with law. Expedient will evaluate requests in light of these requirements and exceptions.

You may exercise applicable California privacy rights by contacting Expedient using the contact information in Section 41. Expedient may verify your identity and authority before fulfilling a request. You may also use an authorized agent where permitted by law, but Expedient may require proof of authorization and verification of identity.

35. HIPAA and Medical-Information Rights

To the extent you are requesting access to, amendment of, accounting of disclosures for, restriction of, or other rights regarding PHI or medical information about you, such requests may be governed by HIPAA, CMIA, applicable healthcare privacy laws, workers’ compensation rules, or the privacy practices of a covered entity, healthcare provider, insurer, claims administrator, or other case participant. Expedient will route or respond to such requests as required by applicable law and its role with respect to the information.

Authorized Doctor Users should not use the App to make patient-rights requests on behalf of claimants unless expressly authorized and unless the request is submitted through the appropriate legal or administrative channel.

36. Children’s Privacy

The App is restricted to Authorized Doctor Users and is not intended for children or individuals under 18 years of age. Expedient does not knowingly permit children to create App accounts or use the App. If Expedient learns that a child has accessed the App or submitted personal information through the App without authorization, Expedient will take appropriate steps to delete or restrict the information, subject to legal and security obligations.

37. Do Not Track; Global Privacy Control

The App is a mobile application and does not use browser-based Do Not Track signals in the same manner as a website. To the extent Expedient operates related web resources, those resources may not respond to Do Not Track signals unless otherwise stated. Because Expedient does not sell personal information or share personal information for cross-context behavioral advertising, Global Privacy Control signals do not change Expedient’s current sale or sharing practices.

38. Privacy Policy Availability and App Store Disclosures

Expedient will make this Privacy Policy, or a materially equivalent privacy policy, available through an active privacy-policy URL, in the App where required, and in applicable app-store metadata or app content submissions. App Store privacy labels and Google Play Data Safety disclosures are separate summaries and should be reviewed for consistency with this Policy and the App’s actual technical behavior before submission or update.

39. Changes to This Privacy Policy

Expedient may update this Privacy Policy from time to time. Updates will be identified by an updated “Last Updated” date or other notice method. If Expedient makes material changes to how it handles personal information, PHI, or sensitive information, it will provide notice as required by applicable law, app-store requirements, or Expedient policy.

40. Additional Terms; Separate Agreements

Your use of the App may also be governed by separate written agreements with Expedient, such as independent contractor agreements, medical expert agreements, QME/AME/IME agreements, confidentiality agreements, Business Associate Agreements, onboarding documents, training requirements, or case-specific instructions. These Terms supplement those agreements. If there is a conflict, the separate written agreement controls to the extent it expressly addresses the conflicting subject, except that privacy, confidentiality, security, and PHI obligations will be interpreted to provide the highest level of protection required by applicable law and agreement.

41. Contact Us

If you have questions about these Terms, this Privacy Policy, App access, privacy rights, account deactivation or deletion, security incidents, or App support, contact Expedient at:

Expedient Medicolegal Services
Steiner Registry Inc.
16060 Ventura Blvd. Ste. 110, PMB 715
Encino, CA 91436
Toll-Free Number: 855 855 0525
Email: info@expedientmedicolegal.com

Mobile App Privacy Policy