ChARM Health API - Terms of Service
This Terms of Service (read 'License Agreement') details the terms and conditions in regard to the licensed use of ChARM Health Application Programming Interface (“ChARM Health API” or “API”) in the following topics:
The ChARM Health API, software developer kit, documentation, and any software, materials or data and any new revisions or updates to the API that MedicalMine Inc. makes available to you, in its sole discretion, (collectively, the “ChARM Health API Materials”) are made available subject solely to the terms and conditions of this Agreement.
Please read this Agreement in its entirety carefully, before either (i) accessing ChARM Health API from an authorized web site, or (ii) developing an installed or web-based application using ChARM Health API. By accessing or using the ChARM Health API Materials, you acknowledge that you have read, and agree to abide by this Agreement. If you are unable to comply with this Agreement, you must immediately cease all use of the ChARM Health API Materials.
ChARM Health API is owned by MedicalMine Inc. and is copyrighted and licensed, not sold. As part of purchasing development license for each developer, MedicalMine Inc. grants you a non-exclusive, non-transferable license to use ChARM Health API as part of your application development. Once your development license is purchased and established, you are authorized to use the MedicalMine API Materials to develop products, sites, applications or services that are designed to interact with and enhance the ChARM Health products and services (“Developer Applications”) subject to the restrictions, conditions and limitations in this Agreement. Sandbox environment will be provided for development purpose.
This development license does not entitle you to any technical support or bug fixes or other maintenance services from MedicalMine Inc. If technical support or maintenance services, as described in Section 3, are desired, a development support license needs to be obtained from MedicalMine Inc.
You must obtain a Deployment License from MedicalMine Inc. for publishing an application that accesses ChARM Health API as part of your application. The Deployment License grants you a worldwide, non-exclusive, non-transferable right to use and deploy an application that utilizes ChARM Health API embedded as part of your Developer Applications. You need to present/showcase your application to MedicalMine Inc., for the deployment license to be granted.
Display of Copyright Information: You must not remove any of the copyright information from the ChARM Health API documentation.
During the development phase of your application, MedicalMine Inc. provides you the option of Deployment/Production Support services. The development and deployment license pricing terms will be outlined, which will also address any applicable fees for the support services
You have no rights with respect to the API or any portion thereof and will not use the API or any portion thereof except as expressly permitted in this Agreement. Regardless of how the ChARM Health API is being used and without limiting the generality of the foregoing, you will not
MedicalMine Inc. reserves the right to restrict, stop or deny your access to our API server in case of suspicion of malicious activity or excessive load as in the case of security attacks or similar threats or when MedicalMine, Inc. reasonably perceive that your use of the API competes directly with any of MedicalMine Inc. products and/or services. We will inform you of such action as soon as reasonably possible by email and/or phone. MedicalMine Inc may also reasonably limit the number of daily API queries that may be submitted by You, the Developer Application, or Developer Site.
You may be given access to certain information, data, materials, know-how, methodologies, documentation, and software relating to the ChARM Health API Materials that is not generally known by the public (“Confidential Information”), which is confidential and proprietary to Medical Mine Inc. You agree to use the Confidential Information only for the purpose of using the ChARM Health API Materials in accordance with this Agreement, and you agree to not disclose any of the Confidential Information to any third party without MedicalMine Inc.’s prior written consent. You agree to protect the Confidential Information in the same manner that you would protect your own confidential and proprietary information but in no event using less than a reasonable degree of care.
You are solely responsible for maintaining the confidentiality of your user name, password, API access token, and for restricting access to your computer, and you agree to accept responsibility for all activities that occur under your credentials. You may not assign or otherwise transfer your account information to any other person or entity, except your legally authorized representative if you are acting in an individual capacity. You acknowledge that we are not responsible for third party access to your account that results from theft, misuse, misappropriation of your credentials or your negligence. You agree that your access to or use of the API, or certain features or functionality of the API, may require our verification of your identity and credentials for and to your ongoing eligibility as an authorized API user. You agree that we may use and disclose your personal information you supply to us for such purposes, including without limitation making inquiry of third parties concerning your identity and eligibility. You authorize such third parties to disclose to us such information as we may request for such purposes, and you agree to hold them and us harmless from any claim or liability arising from the request for or disclosure of such information. You agree that we may terminate or suspend your access to or use of the API at any time if we are unable at any time to determine or verify your identity or eligibility.
In accordance with HIPAA recommendations (cited below for reference) MedicalMine Inc products including all ChARM Health services and products are compliant in securing the authenticity, access control, audits and authorization of Personal Health Information. You are solely responsible for all aspects of HIPAA compliance in your application and your use of ChARM Health API, and you will ensure that you will provide authentication, access control, authorization and a trusted connection to our API servers.
You shall indemnify, defend and hold harmless MedicalMine Inc. and its shareholders, members, partners, owners, officers, directors, managers, and employees from and against all claims, liabilities, losses and damages resulting from any potential breach of HIPAA regulations or gross negligence, resulting from your application or use of ChARM Health API.
Application Programming Interface (API) refers to technology that allows one software program to access the services provided by another software program. In its 2015 Edition of Health IT Certification Criteria (2015 CHIT), the Office of the National Coordinator for Health Information Technology (ONC) established three new criteria at §170.316(g)(7), (g)(8), and (g)(9) that requires certified health IT to demonstrate the ability provide a patient-facing app access to the Common Clinical Data Set via an API.
§170.316(g)(7) - Application Access, Patient Selection
§170.316(g)(8) - Application Access, Data Category Request
§170.316(g)(9) - Application Access, All Data Request
To be certified for API criteria, three privacy and security criterion must also be met:
§170.315(d)(1) “authentication, access control and authorization;”
§170.315(d)(9) “trusted connection;”
§170.315(d)(10) “auditing actions on health information” or §170.315(d)(2) “auditable events and tamper resistance”
This Agreement is effective until terminated. You may terminate this Agreement at any time by ceasing to use ChARM Health API. This Agreement will terminate immediately without notice from MedicalMine Inc. if you fail to comply with any provision of this Agreement. Upon termination, you must cease to deploy any application using ChARM Health API.
MedicalMine Inc. licenses ChARM Health API to you on an "as is" basis, without warranty of any kind. MedicalMine Inc. hereby expressly disclaims all warranties or conditions, either express or implied, including, but not limited to, the implied warranties or conditions of merchantability and fitness for a particular purpose. You are solely responsible for determining the appropriateness of using ChARM Health API and assume all risks associated with the use of it, including but not limited to the risks of program errors, damage to or loss of data, programs or equipment, and unavailability or interruption of operations. Some jurisdictions do not allow for the exclusion or limitation of implied warranties, so the above limitations or exclusions may not apply to you.
MedicalMine Inc. will not be liable for any direct damages or for any special, incidental, or indirect damages or for any economic consequential damages (including lost profits or savings), even if MedicalMine Inc. has been advised of the possibility of such damages. MedicalMine Inc. will not be liable for the loss of, or damage to, your records or data, or any damages claimed by you based on a third party claim.Some jurisdictions do not allow for the exclusion or limitation of incidental or consequential damages, so the above limitations or exclusions may not apply to you.
You acknowledge and agree that MedicalMine Inc. may modify this Agreement, the API, and the ChARM Health API Materials from time to time (a “Modification”). You will be notified of a Modification through direct communication from MedicalMine Inc. to you as soon as possible. Notwithstanding the above, you acknowledge and agree that such Modifications may be implemented at any time and without any prior notice to you. You shall, within thirty (30) days from the date of first notice of any Modification(s) (or such shorter period of time specified in the notice of the Modification(s)) (the “Conformance Period”) comply with such Modification(s) by implementing and using the most current version of the API and making any changes to your applications that may be required as a result of such Modification(s). You acknowledges that a Modification may have an adverse effect on your applications, including but not limited to changing the manner in which your applications communicate with the API. Medical mine Inc. shall have no liability of any kind to you or any user of your applications with respect to such Modifications or any adverse effects resulting from such Modifications. Your continued access to or use of the Services or API following the Conformance Period shall constitute binding acceptance of the Modification(s) at issue.
This Agreement is governed by the laws of the State of California. This Agreement is the only understanding and agreement we have regarding your use of ChARM Health API. You shall not export ChARM Health API or the derived application except in compliance with United States export regulations and applicable laws and regulations. It supersedes all other communications, understandings or agreements we may have had prior to this Agreement.