Effective Date: Oct. 30, 2026

This Mobile Privacy Policy (“Policy”) describes how Blue Cross Blue Shield of Michigan ("we," "us," or "BCBSM") collects, uses, discloses, or otherwise processes personal information obtained through your use of our mobile application (the “App”).

We understand the importance of protecting the privacy and security of your personal information, including protected health information ("PHI"). We maintain PHI  in accordance with applicable federal and state law, including the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations ("HIPAA"), where applicable. If you have questions or would like additional information regarding our privacy practices, please call 313-225-9000.

By downloading, installing, and using the App, you consent to our data practices as described in this Policy and acknowledge and agree to the BCBSM Mobile Application Terms and Conditions (the "Terms").

HIPAA AND PROTECTED HEALTH INFORMATION

When you use the App, we may collect, create, receive, maintain, use, disclose, or transmit information about you that identifies you and relates to your health, health care, payment for health care, eligibility, benefits, claims, enrollment, care management, or other health plan activities. This information may include PHI under HIPAA. This Policy does not apply to PHI. PHI submitted through or made available in the App will be handled in accordance with HIPAA, applicable state law, and our Notice of Privacy Practices.

Our Notice of Privacy Practices describes how we may use and disclose PHI and explains your rights with respect to your PHI. 

To get more information about your rights under HIPAA, visit our HIPAA compliance page. To get copies of individual rights forms, please visit our Protected Health Information and Privacy Forms page. 

INFORMATION WE COLLECT

As used in this Policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal information does not include information that is publicly available, de-identified, or aggregated. Personal information also does not include PHI. We process personal information that you provide to us, and personal information we obtain automatically when you use our App, as described below. 

Personal Information You Give Us. We may collect personal information that you provide when you set up, log into, or use your BCBSM account or the App. This may include your name, address, email address, telephone number, member or subscriber information, account credentials, benefit and enrollment information, claims or payment information, information submitted through forms or questionnaires, communications with customer service, and other information you choose to provide. 

Personal Information Via the App. When you download, access, or use our App, we may (depending on your device or permission settings) collect or have access to certain information about your device. Depending on how you use the App, this information may include, but is not limited to:

• Device information, such as hardware model, operating system, app version, browser type, language settings, mobile network information, device identifiers, and similar technical information.
• Log and usage information, such as pages or screens viewed, features used, search activity, dates and times of access, referral information, error logs, crash reports, and other diagnostic information.
• General location information, such as Internet protocol address and approximate location information derived from your device, browser, or network.
• Precise location information, only when enabled through your device settings or otherwise permitted by law. 
• Storage Information stored locally on your device, such as application data caches and browser or app storage used to support App functionality and stored files on your device in order to save photos.

We may use software development kits (SDKs) and similar tracking technologies to collect information when you use the App. We may use SDKs to operate the App, authenticate users, maintain sessions, remember preferences, improve performance, detect and prevent fraud or misuse, troubleshoot technical issues, measure use of App features, understand how users interact with the App, and support security and compliance activities.

We may disclose your information with certain non-affiliated third parties to facilitate your access and use of our App and to provide us with certain business functions. To the extent we grant third parties access to personal information collected via the App, they are expected to follow privacy practices no less protective than our practices to the extent allowed by applicable law. 

We retain personal information we collect while you use the App for no longer than is necessary to achieve the purposes for which the personal information was collected, or as may otherwise be permitted or required under applicable law.

Personal Information Collected from Interactive Features. You may provide personal information when you use certain interactive features via our App, which may be offered by BCBSM or a vendor who we engage on our behalf. Your use of these interactive features is voluntary, and we may retain the information that you submit through these features. For example, we may offer an interactive chat feature on our App to assist you with questions and searches and for other customer service purposes. By using these features, you understand that we or our vendors may process the information obtained through the feature to provide the App.

We may display personalized banner ads or promotional content within the App based on your interactions within the App, which may direct you to BCBSM information, services, programs, or resources. 

HOW WE USE PERSONAL INFORMATION WE COLLECT

We may use the personal information we collect  

• to provide, maintain, protect, secure, administer, and improve the App and our services; 
• to authenticate users; 
• for customer service and health plan operations; 
• to respond to your requests; 
• to communicate with you; 
• to comply with legal, regulatory, contractual, audit, and records retention obligations; 
• to monitor and analyze trends, usage, and activities of users of the App;
• to detect and prevent fraud, abuse, security incidents, and unauthorized access;  
• to perform other purposes described in this Policy, or as otherwise permitted or required by law; and 
• for any other purpose with your consent or as communicated to you at the time of collection. 

We may also use personal information with artificial intelligence, machine learning technology, or other similar tools and technology, including to enhance your experience, to assist us with customer service, or to train such tools. We (or others on our behalf) reserve the right to aggregate or de-identify any personal information collected from you. We may use deidentified, aggregated, or statistical information to evaluate and improve our services, develop insights, perform analytics, and support business, operational, quality improvement, and compliance activities. We do not use deidentified information to identify you except as permitted by law.

DISCLOSURE OF PERSONAL INFORMATION

We may disclose personal information to affiliated entities, employer group customers where applicable, health care providers, vendors, service providers, business associates, regulators, government agencies, law enforcement, auditors, and other third parties when permitted or required by law, when necessary to provide or administer services.

In addition, we may disclose information:

• If we are required to do so by law, regulation, or legal process (such as a court order or subpoena);
• In response to requests from government agencies, such as law enforcement authorities; 
• If we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity;
• In the event we sell or transfer all or a portion of our business or assets (including a reorganization, dissolution, or liquidation) and negotiations of such transactions; and
• With your consent or at your discretion.

SECURITY SAFEGUARDS

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. No mobile application, website, network, or method of electronic transmission can be guaranteed to be completely secure.

You are responsible for using the App in a secure manner. This includes maintaining the confidentiality of your account credentials, using available security features, keeping your device and contact information current, locking your device, logging out when appropriate, avoiding use of unsecured networks when accessing sensitive information, and promptly reporting suspected unauthorized access or misuse. 

ACCESS TO MEMBER PORTAL

BCBSM members may log into the member portal through the App. Certain portions of the App and certain information that we collection through the App is subject to HIPAA. For more information about our practices under HIPAA, please see our Notice of Privacy Practices. 

YOUR CHOICES

Communications, Email, Text Messages. We may communicate with you by email, telephone, or text message. Push notifications or text messages may appear on your device lock screen. You can manage communication preferences and device notification settings through the App settings. If you do not wish to receive any further promotional emails from us, you can unsubscribe by clicking the appropriate link included in any such email. Please note that even if you unsubscribe from receiving promotional emails from us, we may still send you transactional or informational emails.

For private inquiries, including those containing PHI, and questions about certain communication preferences, please use secure member services or contact customer service. Please do not send PHI or other sensitive information through unencrypted email or other unsecured communication channels.

Device Settings and Permissions. You can use your mobile device settings to limit certain permissions. You may be able to exercise specific privacy choices, such as enabling or disabling certain features (e.g., location-based services, push notifications), by adjusting the permissions in your mobile device and/or the App’s settings. Beware that if GPS precise location services are disabled, other means of establishing or estimating location (e.g., connecting to or proximity to Wi-Fi) may persist. Please note that some App features may not function properly if certain permissions are disabled or settings are changed. With respect to the App, you can stop collection of data generated by use of the App by uninstalling the App. Note that uninstalling the App or changing the App permission will not delete your user account or any information we previously collected via the App.

VOLUNTARY CUSTOMER SURVEYS

We periodically conduct surveys through the App. General surveys may be generated for users, and specific surveys may be offered to members within a secure member area. Survey participation is voluntary. Survey responses may require you to provide personal information depending on the survey content and how you respond.

We use survey responses to improve our services, member experience, quality, operations, and communications. We may use aggregated or de-identified survey results for reporting and analytics. 

LINKS FROM THE APP 

We may link from the App to websites, applications, services, or resources operated by third parties or vendors. These links are provided as a convenience. Some vendor-operated services may support BCBSM functions and may be subject to contractual privacy and security requirements. Other third-party websites or applications may have privacy practices, terms, and security controls that differ from ours.

When you leave the App or access a third-party or vendor-operated service, you should review the applicable privacy policy and terms of use. Where practical, we may provide notice that you are leaving a BCBSM-controlled environment, particularly when the linked service may collect sensitive information.

BCBSM is not responsible for the privacy, security, performance, or content of third-party websites or applications that are not controlled by BCBSM.

PROTECTING CHILDREN

Our App is not directed to or marketed to individuals under the age of 13. Although the App may include information about dependents or minors, we do not knowingly collect information directly from individuals younger than 13.

Parents, guardians, authorized representatives, and members are responsible for using dependent or proxy access appropriately and for protecting account credentials and information made available through the App.

CONTACT US

If you have questions about our privacy practices or this Policy, call 313-225-9000.  

REVISIONS TO ONLINE PRIVACY PRACTICES

We may revise, amend, or modify our online privacy practices and this Policy from time to time. We will notify you of any changes to this Policy by posting an updated version on our App and updating the “Effective Date” at the top of this page. Any changes will be effective when posted or otherwise made available, unless a later effective date is stated.