1. Adult Account control
Only an adult who is at least 18 years old and legally capable of contracting may create or control an Account. A child may not contract directly with YourEMR. An adult may manage another person's Profile only under these Terms.
2. Required authority statement
I am the Profile subject, the parent or legal guardian of the child or dependent, a person authorized by the competent adult, or otherwise legally authorized to create and manage this Profile. I will keep the information accurate and stop managing or sharing it if my authority ends.
3. Child or dependent
A parent may ordinarily begin with an authority attestation. YourEMR may require secure, minimized documentation for a non-parent guardian, conflicting claims, custody concerns, or another material risk. At least 30 days before the child reaches the applicable age of majority, YourEMR will begin a transition review. Public sharing will pause at majority unless the now-adult Profile subject approves continued management or another lawful authority is verified. The child does not independently accept commercial Terms through the adult's Account.
4. Competent adult and caregiver
Use direct electronic approval from the competent adult when practicable and record the approved scope, permitted actions, expiration or review date, and withdrawal method. Routine POA documentation is not required when the competent adult can approve. If the person objects or withdraws approval, pause public sharing and caregiver changes, authenticate parties separately, preserve necessary records, and escalate without deciding the underlying legal dispute.
5. Incapacitated person
Require secure manual review of the minimum current documentation needed to establish authority, such as a guardianship or conservatorship order, an effective healthcare power of attorney, or another state-law instrument. Confirm identity, activation, expiration, scope, and that the authority covers the requested action. Do not accept sensitive authority documents through ordinary email.
Permit redaction of unrelated information. Retain only the minimum verification record needed and delete unnecessary document copies under the approved retention schedule, except when a dispute, legal hold, fraud, or other lawful need requires preservation.
6. Emergency contacts
I have permission or another lawful basis to provide this contact's name, relationship, and contact details for emergency use, and I will defend and indemnify YourEMR against any claim arising from my lack of that permission or authority.
7. Disputed authority
When credible risk exists, pause the affected Public Link and destructive changes; do not expose private facts while investigating; request minimized evidence securely; obtain counsel review; document interim and final action; and maintain an appeal route.
8. Deceased user
YourEMR may preserve data and deactivate public access while requiring secure, minimized proof of death and authority as executor, administrator, or another person authorized under applicable law. Credentials are not transferred. Export or deletion is provided only within lawful authority, contract rights, and applicable probate or privacy law.
9. Ending authority
A person whose authority ends must stop access and sharing, notify YourEMR when necessary, and cooperate with reassignment, export, or deletion. Ending authority does not erase lawful audit or dispute records.
10. Consent and rights allocation
The Account holder accepts the commercial Terms. The Profile subject, or a verified person lawfully acting for the subject, provides Profile-specific Consumer Health Data and Public Link consents. A privacy request concerning another person is limited to the requester's verified authority. YourEMR may contact the Profile subject separately, pause disclosure, or require counsel review when consent, authority, custody, capacity, or competing rights are unclear.