Terms Unconditional

EHR & Health Data Systems · EHR Vendor (Enterprise/Hospital) · No confirmed finding (unverified, not clean)

MEDITECH (Medical Information Technology, Inc.)

Headline

Nothing confirmed

MEDITECH is a Massachusetts hospital-records vendor (Expanse EHR) whose patients reach it only through their hospital, usually via the MEDITECH-built 'MyHealth' patient portal.

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

What this pass recorded. MEDITECH is a Massachusetts hospital-records vendor (Expanse EHR) whose patients reach it only through their hospital, usually via the MEDITECH-built 'MyHealth' patient portal. MEDITECH's privacy policy covers its website and services, says it 'will never sell, trade, or rent your personal identification information,' and routes data-rights requests about records held in its software to the patient's provider. It also shares website-usage data with HubSpot and Google Analytics and may combine it with personally identifiable information for marketing analysis. The company stopped filing with the SEC at the end of 2020 after a 1-for-5,000 reverse stock split that cashed out small shareholders, so it now publishes little financial or risk information. No breach, regulator action, or major lawsuit against MEDITECH was confirmed in this pass, but research was cut short, so this is not a clean bill of health.

  • SeveritySeverity 2 of 5, not independently verified. MEDITECH is a Massachusetts hospital-records vendor (Expanse EHR) whose patients reach it only through their hospital, usually via the MEDITECH-built 'MyHealth' patient portal.
  • Evidence tierUnassigned
  • Claims confirmedNo sourced claims yet
  • Last verified2026-10-15

Primary source. ehr.meditech.com/privacy-policy — Unverified - heuristic first draft.

Last verified 24 days agoverified 24 days ago0180 days
Freshness. Last verified 24 days ago (2026-10-15); stale after 180 days.

Terms

Arbitration

No direct patient agreement identified; MEDITECH website lists a Privacy Policy and Cookie Policy but no terms of use in its footer. MyHealth portal terms are set by each hospital (not verified this pass).

Data sharing

Holds hospital EHR and portal data on behalf of customers. Privacy policy: no sale of personal identification information; 'Authorized vendors and third parties of MEDITECH may have limited, incidental access to your data'; website analytics via HubSpot and Google Analytics. De-identified data programs: the website privacy policy does not mention de-identified data, and no MEDITECH de-identified data program was identified (absence not confirmed).

Who holds your data. Data chain: MEDITECH (Medical Information Technology, Inc.), then EHR vendor layer. See cross-cutting finding 16: THE EHR LAYER — THE COMPANY HOLDING YOUR CHART IS ONE YOU NEVER SIGNED WITH.

Fees and billing

No consumer fees identified; vendor paid by hospitals.

Contacts

Privacy contact. Philip Polimeno, Chief Information and Privacy Officer, 7 Blue Hill River Road, Canton, MA 02021; (781) 821-3000; data-rights toll-free (833) 397-2673

Legal notice. Medical Information Technology, Inc., MEDITECH Circle, Westwood, MA 02090 (last SEC filing, 2020); correspondence address 7 Blue Hill River Road, Canton, MA 02021

Mailing address. Not recorded.

Written channel present
Paper trail: written. Written channel present.

Evidence

No claims have been itemized for this row yet.

Sources

SourceClaimTierStatusQuote
Company privacy policy · Undated (c
ehr.meditech.com/privacy-policy
whole rowUnassignedconfirmed“MEDITECH will never sell, trade, or rent your personal identification information to others.”
Quote basis: not recorded.
Company website · 2026-10-14
ehr.meditech.com/ehr-solutions/patient-empowerment
whole rowUnassignedconfirmed“With solutions like the MyHealth patient portal and Expanse Patient Connect”
Quote basis: not recorded.
Company website · 2026-10-14
ehr.meditech.com/contact
whole rowUnassignedconfirmed“Address 7 Blue Hill River Road, Canton, MA 02021 Call 781-821-3000”
Quote basis: not recorded.
SEC Form 8-K · 2020-11-30
www.sec.gov/Archives/edgar/data/1011452/000101145220000044/eight-k.htm
whole rowUnassignedconfirmed“effect a 1-for-5,000 reverse stock split”
Quote basis: not recorded.

Source vault

Link status: Candidate - not yet fetched

DocumentLast fetchPDF
Privacy policy
https://ehr.meditech.com/privacy-policy
Not fetched yetNOT CONFIRMED
Terms of service
Not found on site footer this pass
Not fetched yetNOT CONFIRMED
Website
https://ehr.meditech.com/
Not fetched yet—
Primary source
https://ehr.meditech.com/privacy-policy
Verification: Unverified - heuristic first draft
Not fetched yet—

Enforcement

No enforcement actions are linked to this row.

State statute

No comprehensive state privacy statute on file for MA