A patient’s story is scattered across a dozen databases. Doctors rarely see the whole picture.
Fragmented records
Patients who visit multiple outpatient providers are at greater risk of uncoordinated, fragmented care, linked to higher rates of hospitalization, emergency department visits, and duplicated testing.2
Time lost to administration
For every hour of direct patient care, physicians spend nearly two additional hours on EHR and desk work. Outside office hours, another one to two hours of personal time is consumed by documentation.1
Decisions made incomplete
Without a complete history, clinicians risk prescribing conflicts, duplicate testing, and missed diagnoses.
The solution
Built for how medicine actually works
Our software, Unifyr, doesn’t replace your EMR. It sits above it, pulling every available record from every connected source and presenting a complete, chronological patient history the moment a doctor opens a chart.
Unified patient record
A patient’s available records, brought together into one continuous view. No manual imports, no stale data.
Ambient clinical documentation
Structured clinical notes captured during the visit, ready for the provider to review and sign.
Pre-visit intelligence
Nurse-logged vitals and patient intake questionnaires appear in the doctor’s overview before the appointment begins.
Chronological timeline
Every visit from every source, the clinic’s own records and external EMR encounters, displayed in one unified timeline.
Multi-location group practices
One organization across multiple locations. Staff assigned to facilities, with role-based access control.
HIPAA-native architecture
Encrypted in transit and at rest, with append-only audit logs, database-level tenant isolation, and BAAs in place with all infrastructure providers.
How it works
From scattered records to signed note in one visit
1
Patient arrives
The nurse logs vitals and intake, and the patient’s available records are assembled into one view.
2
Doctor reviews
The physician sees today’s vitals, the complete external medical history, active medications, and prior visit timeline, all in one screen.
3
Consultation recorded
The visit is documented as it happens, producing a structured clinical note for the provider.
4
Note signed
The note is reviewed, edited, and signed, then filed automatically to the patient’s chart.
The complete patient picture starts here
Join the waitlist for early access. We are onboarding founding clinics in South Florida first.
No commitment required. We will be in touch within 48 hours.
Last updated: November 1, 2026 · PrimeLink Health LLC
1. Introduction
PrimeLink Health LLC ("PrimeLink Health," "we," "us," or "our") operates the Unifyr platform, a healthcare technology application that aggregates patient records from connected Electronic Health Record systems for use by licensed healthcare providers. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with our services.
By accessing or using the Unifyr platform, you agree to the collection and use of information in accordance with this policy.
2. HIPAA Compliance
PrimeLink Health LLC operates as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. We enter into Business Associate Agreements with all Covered Entity customers prior to the processing of any Protected Health Information (PHI).
All PHI processed through the Unifyr platform is handled in accordance with the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule. Our technical safeguards include encryption in transit and at rest, database-level access controls, append-only audit logging, and multi-tenant data isolation enforced at the database engine level.
3. Information We Collect
We collect the following categories of information in connection with our services:
Account Information: Name, email address, professional credentials, and practice information provided during registration.
Patient Health Information: Clinical records aggregated from a patient's available health record sources, vitals logged by clinical staff, intake questionnaire responses, and clinical notes generated through the platform. This information is processed solely to provide clinical documentation services to authorized healthcare providers.
Usage Data: Log data including IP addresses, browser type, pages visited, and timestamps, used for security monitoring and audit compliance.
Audio Data: When the ambient transcription feature is active, audio from clinical consultations is processed by our speech-to-text service provider under a signed Business Associate Agreement. Audio is processed in real time and is not permanently stored.
4. How We Use Information
We use the information we collect to provide, operate, and maintain the Unifyr platform; authenticate users and enforce access controls; generate and store clinical documentation on behalf of authorized providers; aggregate a patient's available health records for authorized providers; maintain audit logs of all PHI access events as required by HIPAA; respond to support requests; and comply with legal obligations.
We do not sell, rent, or share Protected Health Information with third parties for marketing purposes.
5. Data Storage and Security
All data is stored on Amazon Web Services infrastructure within the United States under a signed Business Associate Agreement. Our security measures include AES-256 encryption for all data at rest, TLS 1.2 or higher for all data in transit, multi-tenant isolation enforced by PostgreSQL Row-Level Security policies, role-based access control, automated daily database backups with 35-day retention, Multi-AZ database deployment, and append-only audit logging of all PHI access.
6. Third-Party Service Providers
We work with third-party service providers that may process PHI on our behalf, including cloud infrastructure and database services (AWS), speech-to-text transcription services (activated only after BAA execution), and health information exchange partners under applicable agreements. Business Associate Agreements are in place or required with each prior to PHI transmission.
7. Data Retention
Clinical records and patient data are retained for the period specified in the customer's service agreement, subject to applicable state and federal medical record retention requirements. Audit logs are retained for a minimum of six years in accordance with HIPAA requirements. Upon termination of a customer's account, data is retained for 30 days to allow for export, then securely deleted.
8. Breach Notification
In the event of a breach of unsecured PHI, PrimeLink Health LLC will notify affected Covered Entity customers without unreasonable delay and no later than 10 days after discovery, as required by the Florida Information Protection Act (Fla. Stat. § 501.171). This is stricter than the 60-day limit in the HIPAA Breach Notification Rule (45 CFR §§ 164.400–414).
9. Contact Us
For privacy-related inquiries, BAA requests, or to report a potential security issue:
Last updated: November 1, 2026 · PrimeLink Health LLC
Unifyr handles protected health information (PHI) for outpatient clinics. This page summarizes how we protect it. For the full terms, see our Privacy Policy.
HIPAA and Business Associate Agreements
PrimeLink Health LLC operates as a Business Associate under HIPAA. We sign a Business Associate Agreement (BAA) with every clinic before processing any of its patients’ health information.
We have signed BAAs with the providers that host and carry data for us, including Amazon Web Services (hosting) and Google Workspace (email). Any new vendor that would handle PHI signs a BAA before it does.
Where data is stored
All data is stored on Amazon Web Services infrastructure within the United States, in a database deployed across multiple availability zones.
Encryption
At rest: AES-256 encryption for all stored data.
In transit: TLS 1.2 or higher for all data moving between your browser and our servers.
Access control
Every person signs in with their own account, and what they can see and do is limited by their role. Each clinic organization’s data is kept separate from every other organization’s.
Audit logging
Access to patient information is recorded in append-only audit logs, which are kept for at least six years as HIPAA requires.
Backups
The database is backed up automatically every day, and backups are kept for 35 days.
Retention and deletion
Patient data is kept for the period in the clinic’s service agreement, subject to state and federal medical record retention rules. When a clinic closes its account, its data remains available for export for 30 days and is then securely deleted.
Breach notification
If unsecured PHI is ever breached, we notify affected clinics without unreasonable delay and no later than 10 days after discovery, as Florida law requires. That is stricter than HIPAA’s 60-day limit.
Security questions
To ask about our security practices or to report a potential issue, email [email protected].