Last updated: October 9, 2026

Salyx Healthcare Services LLC (“Salyx RCM”, “we”, “us”, or “our”) provides medical billing and revenue cycle management services to healthcare providers in the United States. This HIPAA Compliance Notice explains our role under the Health Insurance Portability and Accountability Act (“HIPAA”) and related rules.

Important: Salyx RCM is a business associate, not a covered entity. This page is not a covered-entity Notice of Privacy Practices (NPP). Patients looking for an NPP should contact their own healthcare provider or health plan.

Our Role as a Business Associate

When client practices engage Salyx RCM for services such as medical billing, coding, claim submission, payment posting, accounts receivable and denial management, patient collections support, credentialing, intake and eligibility, MIS reporting, bookkeeping, virtual assistance, or remote patient monitoring (RPM) billing, we may create, receive, maintain, or transmit protected health information (“PHI”) on their behalf.

In that role, we act as a business associate under HIPAA. We use and disclose PHI only as permitted by HIPAA, by our Business Associate Agreement (“BAA”) with the client practice, and by the underlying services agreement.

Business Associate Agreements

Before we handle PHI for a client practice, we enter into a BAA with that practice (or otherwise ensure BAA coverage as required). The BAA describes permitted uses and disclosures, required safeguards, breach notification duties, and other HIPAA obligations. Website forms and marketing materials do not replace a signed BAA.

Safeguards

We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of PHI, consistent with the HIPAA Security Rule and our information security program. Salyx RCM is certified to ISO 9001 and ISO 27001 and operates a HIPAA compliance program that includes workforce training, written policies, and internal audits.

Safeguards are selected and updated over time as part of risk management. This Notice describes our general approach and does not list every control or tool we use.

Minimum Necessary

We limit uses, disclosures, and requests for PHI to the minimum necessary to perform the services our clients engage us to provide, except where HIPAA permits or requires otherwise (for example, certain treatment, payment, or legally required disclosures as allowed in the BAA and applicable rules).

Workforce Training and Access

Workforce members who need access to PHI for their job receive HIPAA-related training and are expected to follow our policies. Access to PHI is limited based on role and job duties. Unauthorized use or disclosure of PHI is prohibited and may lead to disciplinary action and other remedies.

Breach Notification

If we discover a breach of unsecured PHI, we will notify the affected client covered entity as required by HIPAA and our Business Associate Agreements, so the client can meet its own notification duties to individuals and, where applicable, to regulators. Timing and content of our notice to the client follow HIPAA and the applicable BAA.

Patients: Contact Your Provider

If you are a patient, Salyx RCM generally does not maintain a direct treatment relationship with you. Questions about your medical records, bills from your provider, privacy rights under a Notice of Privacy Practices, or requests to access, amend, or restrict PHI should be directed to your healthcare provider (the covered entity), not to Salyx RCM through this website.

If we receive a patient privacy request, we will typically forward it to the appropriate client practice or direct you to that practice, consistent with our BAA and HIPAA.

Do Not Send PHI Through Website Forms

Please do not send PHI, medical records, claim attachments, insurance ID cards, or similar sensitive health information through the website contact form, Free Billing Audit form, email to general inboxes unless we have instructed you to use a secure method, or other public Site channels. Those channels are for business inquiries and are not designed as a PHI intake portal.

After a client engagement is in place, we will provide approved secure methods for exchanging information needed for services.

Relationship to Our Website Privacy Policy

Our Website Privacy Policy covers information collected from website visitors (for example, name and email on a contact form). PHI that we handle as a business associate for client practices is governed by HIPAA, the BAA, and this Compliance Notice, not by the website Privacy Policy alone.

Changes

We may update this HIPAA Compliance Notice from time to time. The “Last updated” date at the top will change when we publish updates.

Contact for Privacy Questions

For questions about this HIPAA Compliance Notice or Salyx RCM’s privacy practices as a business associate (not for patient medical-record requests):

Salyx Healthcare Services LLC (Salyx RCM)
9311 SE Maricamp Rd, Unit #444
Ocala, FL 34472
Email: info@salyxrcm.com
Phone: (321) 788-3655