Acceptable Use Policy

This policy applies to every practice that uses RunPractice, its Authorized Users, and anyone else who uses the Services, including patients. It forms part of the Terms of Service. A violation can lead to the removal of content or the suspension or termination of access.

• Practitioners make every clinical decision. Review and approve AI Scribe notes, Practice Assistant summaries and any other clinical draft before it becomes final or reaches a patient.
• Don’t configure AI employees to diagnose, prescribe or give individual medical advice, and don’t remove the hand-off that sends clinical questions to your team.
• Don’t present an AI employee as a human clinician. Give the AI disclosures that apply to you, and connect patients with a person when they ask.
• Don’t use the Services for emergency response.
• Don’t use AI Features for services that the law in your state restricts to licensed people or prohibits.

• Get the consent the law requires before you text patients or call them with automated or AI-generated voices. The FCC treats AI-generated voices as “artificial” voices under the Telephone Consumer Protection Act.
• Honor STOP and other opt-out requests immediately, and don’t message people who opted out except as the law allows.
• Identify your practice in every message. Don’t spoof numbers or use misleading sender information.
• Don’t send marketing calls or texts before 8 a.m. or after 9 p.m. in the patient’s time zone, or at other times your state prohibits.
• Don’t use purchased, rented or shared contact lists.
• Keep detailed health information out of texts and email, and link to the patient portal instead.
• Tell people when calls or visits are recorded, and get the consent of everyone involved where state law requires it.

• Keep health claims truthful and supported by evidence. Don’t publish fake reviews or testimonials, and follow your profession’s advertising rules.
• Don’t upload patient information to advertising platforms or build audiences from it without a valid HIPAA authorization or other legal basis.
• Don’t install tracking technologies on patient portals, sign-in pages, booking steps after identity verification, or other areas where they could disclose protected health information.

• Collect and use only the information you need, and give each team member access only to what their role requires.
• Don’t upload information you don’t have the right to use.
• Don’t sell patient information or use it to discriminate unlawfully.
• Don’t try to re-identify de-identified information.

• Don’t probe, scan or test the Services for vulnerabilities without our written permission. Report suspected vulnerabilities to [email protected].
• Don’t get around sign-in, identity verification or usage limits, and don’t share accounts.
• Don’t upload malware or anything designed to disrupt the Services or other customers.

Don’t use the Services to:

• break the law, commit fraud or mislead patients about prices, services or credentials;
• harass, threaten or discriminate against anyone;
• infringe intellectual property or privacy rights;
• impersonate a person or organization;
• prescribe or dispense controlled substances outside the law; or
• sell products or services that the law or our payment processor prohibits.

• Don’t scrape, copy or reverse engineer the Services except where the law allows it.
• Don’t resell the Services or use them to build a competing product.
• Don’t access the Services by automated means other than the interfaces we provide, or place an unreasonable load on them.

• Follow Stripe’s terms, including its list of restricted businesses.
• Show patients clear prices and refund and cancellation policies.
• Give the payment notices your state requires, such as New York’s notice about paying for care by credit card.
• Don’t require a card on file or pre-authorization for emergency or medically necessary care where the law prohibits it.

We may investigate suspected violations, remove content, disable features, and suspend or terminate access. Where appropriate, we may report unlawful activity to the authorities. To report a violation or a security concern, email [email protected].