Patient support

uMed nurse patient support team

We are an accredited platform used by healthcare professionals across the United States to connect patients with medical research opportunities that are relevant to their health circumstances.

If you have further questions about uMed or a study you have been invited to, please contact our patient support team.
Access research studies
AccessPD
Parkinson’s Disease
View
AccessILD
Interstitial Lung Disease
View
AccessCMD
Cardiometabolic Disease
View
Security FAQs
Frequently asked questions
What does uMed do?

uMed works on behalf of your healthcare provider to increase the number of medical research studies offered to patients. We use a secure, HIPAA-compliant technology platform and a team of trained clinical staff to identify suitable research opportunities and invite patients to take part.

Why am I being contacted by uMed?

We work on behalf of your healthcare provider to identify potential research studies that may be relevant to you. uMed sends approved invitations by SMS, email, or letter. Our trained team can answer any questions you may have about these research opportunities.

Why should I trust the uMed Platform?

The uMed platform is fully HIPAA-compliant and operates under a signed Business Associate Agreement (BAA) with your healthcare provider. This means uMed is legally authorized to process your health information only for the specific purposes your provider has approved.

Our platform is:

•       Fully HIPAA-compliant with a signed Business Associate Agreement (BAA)

•       ISO 27001:2022 and ISO 9001:2015 certified

•  Operating under IRB-approved protocols in compliance with US federal research regulations (45 CFR Part 46)

What information does uMed use?

Your healthcare provider shares a roster file with uMed containing relevant patient information. This may include:

•       Name

•       Date of birth

•       Phone number

•       Email address

•       Demographic information

•       Relevant health record information

 

We apply strict access controls and encryption to your data from the point of receipt. Your data is used only to check your eligibility for research studies. Any health data shared with researchers following your consent is used in accordance with your informed consent and HIPAA authorization.

Identifiable information may be shared where permitted by the authorization and the approved study protocol.

This arrangement operates under a Business Associate Agreement (BAA) between uMed and your healthcare provider, in compliance with HIPAA and applicable US state privacy laws.

How will my data be used?

Health information provided by your healthcare provider will only be used to check your eligibility for research studies and, if you consent, for the purposes of the specific study you enroll in. It will not be used for any other purpose.

Before you consent, your data is used only to assess eligibility. No data is shared with researchers or used for marketing. All steps are approved by your healthcare provider and reviewed by an Independent Review Board (IRB).

If you choose to participate in a study, we will ask for your informed consent and HIPAA authorization before any of your health data is shared with the study team. Health data shared with researchers is used in accordance with your authorization and the approved study protocol.

How do you keep my data secure?

The uMed platform protects all your data using encryption, strict role-based access controls, and comprehensive audit logging. Only authorized personnel with a legitimate, approved purpose can access your information.

We use:

•       AES-256 encryption at rest and in transit (TLS 1.2)

•       Multi-factor authentication

•       Firewalls and intrusion detection

•       Regular independent security audits and penetration tests

 

Your identity is protected at all times. No data is shared without your consent.

How accessible is the uMed platform for users with disabilities?

uMed is committed to making our platform and services as accessible as possible, in line with the Americans with Disabilities Act (ADA) and Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards.

Our platform supports keyboard navigation, resizable text, and alternative text for images, enabling participation for users with visual, motor, or cognitive impairments. If you encounter any barriers, we offer flexible alternatives such as telephone or video-assisted completion of questionnaires, guided by our trained support team.

How do you protect my identity?

We protect your data through strict access controls and encryption from the point of receipt, ensuring your details are only accessible to authorized staff with a legitimate purpose. Any data used in aggregated research outputs or publications is de-identified or anonymized so that individual patients cannot be identified. Only the minimum necessary information, such as your contact details for sending an invitation, is accessed by authorized staff, and nothing is shared without your consent.

How does uMed’s platform comply with UK GDPR and Data Protection Act 2018?

Your GP signs a data processing agreement with uMed, that legally allows your GP or Doctor to share your data on your behalf and offer you research opportunities to take part in. This is also the legal basis for us to process your data on behalf of your GP or Doctor (the controller of the data).

Data is provided to uMed by GPs, in order to provide a service under a Data Process Agreement. uMed cannot use the data for research purposes itself, only under the direction of the data controller (GP), who may agree to participate in a specific study that may require CAG approval.

How does uMed comply with HIPAA and US privacy laws?

Your healthcare provider signs a Business Associate Agreement (BAA) with uMed. This legally authorizes uMed to process your protected health information (PHI) on behalf of your provider for the specific purpose of identifying and inviting you to relevant research opportunities.

uMed cannot use your data for any purpose beyond what is permitted by the BAA and your provider's instructions.

All processing is conducted in accordance with HIPAA, the HITECH Act, and applicable state privacy laws, including state-specific requirements where relevant (e.g., California CMIA).

uMed implements appropriate administrative, physical, and technical safeguards to protect PHI at all times.

Can I Opt-Out?

You are in full control of your data at all times.

If you do not want your information to be used by uMed, you can opt out at any time by:

•       Emailing: patientsupport@umed.io

•       Replying STOP to any SMS message you have received from us

 

You may also exercise your rights under HIPAA, including the right to access, amend, or request restrictions on your protected health information, by contacting uMed or your healthcare provider.

Does uMed sell or share my data?

No. uMed uses your information only for the purpose of helping your healthcare provider offer you relevant medical research opportunities, and only under the direction of your provider.

uMed will never share your health information with any other organization unless instructed by your healthcare provider, in a manner consistent with HIPAA, the BAA, and applicable US privacy laws.

Will I receive any payment for participation?

Compensation arrangements vary by study and are described in the informed consent document for each specific study. Any compensation offered will be reviewed and approved by the Independent Review Board (IRB) overseeing the study, and will be clearly explained to you before you consent to participate.

We will also keep you updated on the outcomes of research that uses your data, and show you how your contribution is helping to improve the lives of others.

What will be involved if I consent to participate in a study?

If you choose to engage with a particular study, you will be presented with detailed information about the study, including what is involved, what data will be collected or shared, and any risks or benefits. You will be asked to provide your informed consent and HIPAA authorization before any research activity begins.

It is entirely your choice whether or not to participate. If you decide not to take part, it will have no impact on the care you receive from your healthcare provider.

I have more questions: who can I speak to?

If you have any questions, please do not hesitate to contact uMed at patientsupport@umed.io. One of our dedicated team members will speak to you.