Where are you located?
See the best information for your region

A REVIEW OF HALAXY (HEALTHKIT)

HALAXY VS POWER DIARY

There are some important differences about Halaxy (formerly HealthKit) that we want to bring to the attention of health practitioners.

Choosing the right practice management software for your clinic can be a difficult and confusing decision. To help make the decision a little easier, we periodically review competitor systems and compare different aspects of them to Power Diary. When doing this, we ask ourselves:
What is the most important and helpful information people need to know about the differences between system X and us? Usually this comes down to different features, usability, costs, security, reliability etc.

Not in Halaxy’s case.

There are concerning differences in how Halaxy can use your clients’ health data.

Halaxy’s Terms-of-Use and Privacy Policy are different. Very Different.

Before we dive in, let’s deal with the elephant in the room. Halaxy is a competitor of Power Diary. To avoid accusations that we’re interpreting their Terms of Use (TOU) and Privacy Policy (PP) in an out-of-context manner, we’ve attached full copies of Halaxy’s Terms of Use and Privacy Policy (printed from their website on 25th March 2020) so you can review these directly, and form your own view.

Furthermore we’re highlighting Halaxy’s TOU and PP because they contain clauses we think most practitioners and patients would not expect. In fact we haven’t found clauses like Halaxy’s in any other commonly used competitors in the marketplace including:

  • Medical Director
  • Coreplus
  • Front Desk
  • Zedmed
  • Best Practice
  • Genie
  • Janeapp
  • Cliniko
  • TM2 / TM3
  • PPMS
  • PracticePal
  • Writeupp

So what’s actually in Halaxy’s Privacy Policy?

Halaxy’s Privacy Policy starts out with a fairly standard introduction, and reinforces the notion that by providing Personal Information, you consent to Halaxy using it in the manner described in that policy. This is all pretty normal boring stuff.

Data Collected

It then goes on to list the type of personal information Halaxy may collect. Again this list is fairly standard for a Practice Management System, however it’s important to note that the personal information collected may include health information entered into Halaxy by a patient or practitioner, including:

  • “..the treatment you have received…;
  • …service type, service description…;
  • …which practitioner treated you…;
  • …test results…;
  • …current and past medical history”.

This becomes particularly relevant when we look at Halaxy’s permitted purposes of use which they detail next.

Permitted Purposes of Use

Halaxy’s Privacy Policy then outlines the full range of permitted purposes that it can use and / or disclose the Personal Information entered into its system. Among the standard uses that might be expected, a number of purposes are included that we think neither practitioners nor patients would reasonably expect or knowingly consent to. This includes:

  • “…conduct research and for advertising and marketing”;
  • “for medical research purposes, including providing this information to third parties for this purpose”;
  • “to send you marketing and promotional messages…sent by…our business partners”.

You can see a more complete range in this screenshot here:

In other words, Halaxy’s Privacy Policy appears to give it permission to access, use and disclose individually identifiable medical information that has been entered into its system for purposes that include medical research, marketing, advertising or other commercial activities. Furthermore there does not appear to be any requirement for Halaxy to notify practitioners or patients when data is used for these purposes, who patient data has been provided to, or any mechanisms for practitioners or patients to prevent the further use of their data once it has been provided to third parties.

What about patient consent? Who is responsible?

To understand this we need to look at Halaxy’s overall Terms and Conditions which can be found here: https://halaxy.com/article/terms.

The clearest answer to the consent question appears to be contained in the section Practitioner Specific Clauses, Section 5. General Obligations where it states that you (the practitioner) warrant to Halaxy:

“That all Persons for whom or to whom services are provided are aware of and comply with and accept all terms of these Terms that apply in relation to Data, including the Privacy Policy.”

Put simply, this appears to indicate that if you’re a practitioner using Halaxy, you agree that you have made your patients aware of how Halaxy can use patient’s health data, and you have obtained patient’s consent for this.

This appears to be further emphasised in Halaxy’s Privacy Policy under “Collection of personal information – what, how and why; In Addition; 3.” where it states that if you are using Halaxy and providing information to it about someone else i.e. entering patient treatment information, that you have made the person aware of, and gained their consent for Halaxy to use and disclose that information for all the purposes previously mentioned.

Whilst there are also circumstances where patients can provide consent to Halaxy’s Privacy Policy directly, i.e if they were to register directly on the system, it would appear that failing this, it is the practitioner who enters patient data into Halaxy that is attesting to the fact that they have obtained their patients’ consent for Halaxy’s subsequent use of their data.

Is Halaxy different to other PMS providers?

In our view, Halaxy cannot be compared to other practice management systems due to their differences in their Terms of Use, Privacy Policy and pricing structures.

In our review of Practice Management Systems, we found that nearly all systems, including Power Diary, operate something like this:

Fees for Extras:
Additional fees typically apply for extras such as SMS use, payment processing etc.

Data Use:
Patient health data entered is considered to be the exclusive property of the practice. It is only used by the PMS in a manner you’d reasonably expect as part of operating a Practice Management System. The Privacy Policies do not allow accessing or using patient data for other commercial or research purposes.

Halaxy’s Terms and Conditions, Privacy Policy and it’s pricing model indicate a very different approach:

Fees for Extras:
Fees apply for extras such as SMS use, payment processing etc.

“If you don’t pay for a product, you are the product”

Providing services or software for free in exchange for people’s personal data is not new, and not necessarily a bad thing. It comes down to people making an informed decision. Most people use free services like Google, Facebook, Instagram, and understand their data is used for advertising and other purposes.

Halaxy advise users they “are building the largest, most unique health longitudinal datasets in the world” and that by using Halaxy they’re “contributing” in exchange for “access” to the system.

In our view this does not make it clear enough that Halaxy can use and disclose patient data for a much wider range of uses. Furthermore, the onus of gaining consent for that data use primarily lies with the practitioner.

Concerned – What should you do?

First of all read Halaxy’s full Terms of Use and Privacy Policy and decide for yourself whether they meet your expectations and the expectations of your patients. If you’re not sure about any element seek the opinion of a legal professional who specialises in health and follow their advice.

Not happy with the Terms of Use and Privacy Policy and unsure what to do? We’ll leave the final word on that to Halaxy.

FAQ’s

Since we published this article we’ve had a number of interesting questions asked. So we wanted to address them as follows:

Is this just an attack on a competitor?

While it’s true that Power Diary operates in a competitive environment, we actually list our key competitors at the top of this article that, in our view, do not raise the same Privacy Policy concerns as Halaxy. We do this to make it clear that if someone is concerned about Halaxy’s Privacy Policies, there are many other alternative Practice Management Systems to choose from, not just Power Diary.

With other competitors, Power Diary takes the time to compare features and prices so that health practices can make a more informed decision. However, in the case of Halaxy, we are so concerned about the potential issues with data use, that we no longer include comparisons of their features or pricing. We think that doing this implies that Halaxy is just like any other system when in our view, it is vastly different.

We’re hoping that Halaxy will improve their policies and approach to data security and privacy. Should this happen we will be happy to update the information here.

Why not take this up with AHPRA or other governing bodies?

These bodies don’t regulate practice management system companies – they regulate practitioners. They set guidelines for choosing suitable software systems, but full responsibility lies with the practitioners to select software that meets their requirements.

Halaxy have assured me that everything is fine. Do I still need to worry?

Use of Client Data for Marketing:
We’ve had several practitioners stating that they’ve been in contact with Halaxy and have been advised that their client data is not being used for marketing purposes. Concerningly, in their responses, Halaxy has also cited scenarios where practitioners would normally expect data to be shared (i.e. use of an integration) to justify clauses that allow the provision of data to third parties for much broader purposes.

Whilst we are pleased to hear Halaxy’s claims that they are not using client data for marketing purposes, we will remain very concerned until Halaxy updates their official Privacy Policy and Terms of Use to remove these allowed uses. If there is truly no intention for Halaxy to ever use client data for marketing or other commercial purposes, it is baffling as to why they would not simply update these policies to reflect this.

Use of Client Data for Research:
It is also notable that in their responses to practitioners that Halaxy does not appear to address the concerns raised in this article regarding the use of client data for medical research purposes. Whilst there are of course many noble research projects with high ethical standards, there are also many more for-profit medical research projects with commercial objectives. Halaxy’s policies do not limit or specify the types of research that clients’ data can be used for. But more importantly, if clients are to participate in any medical research, they should be giving their individual, explicit, and informed consent for this. And the onus of this responsibility should not fall to practitioners (as it does currently according to Halaxy’s policies).

We’ll continue to update this article with any commonly asked or interesting questions that we come across.

You can see why we Power Diary is trusted by over 27,000 practitioners!

Try Power Diary for Yourself!

50% OFF
START IN May: SPECIAL OFFER
Begin your free trial before the end of May 2020 to receive 50% off for your first 6 months!
Start Your Free Trial Now
No credit card required

But really, it’s best to hear from our customers

Join more than 26,700 practitioners who love and rely on Power Diary

"My business could not function without Power Diary. It enables our staff to work from anywhere. Love that we can customise the program to suit our business."

Margaret Asimus,
Skin and Wound Care Consultancy

“I’ve used a number of different practice management systems and there’s no doubt that Power Diary is best in class.”

Dr. Ryan Kaplan Clinical Psychologist
Be Psychology and Mental Health

"Really efficient planning and invoicing. The reminder emails and text messages have been reliable. I have been thoroughly impressed with Power Diary!"

Lauren Darsie,
Physiotherapist,
Childspace Paediatric Physiotherapy

"Helps me get organised and make my appointments for the week. I can easily visually see who is still owing payments and also it creates space for me to add extra things. Your help desk is amazing. Thank you!"

Sophie Egan,
Sophie EGAN Speech Pathology Clinic

"Great easy booking system - love that I can do reports, store patient notes, send emails, invoices and write letters. Has made my business seamless!"

Sarah Sealey,
Physiotherapist,
Amity Physio Pilates

"My clients love making appointments through our Client Portal… some wake up with pain in the middle of the night, and they grab their iPad or Tablet and book a time that suits them!"

Tony Logan-Stevens,
Remedial Massage Therapist,
Hands from Heaven

Happy customers are our lifeblood. We’d love you to join us.

Still need a hand deciding?

The Power Diary support team is ready to help!
You can contact us through email, online chat, or access our knowledge base.

Or checkout more information here:

Reviews

See customer reviews for Power Diary

Features

Learn about our practice management system

Pricing

See how affordable Power Diary really is

Data Import

We’ll help you import your data for free

Try It for Free

Start a free, 14 day trial (no credit card needed)