Legal Details
HIPAA Notice of Privacy Practices
At your request we can provide a copy of our HIPAA policy.
If you are already a patient, you were offered a copy, signed its acknowledgement, and the copy will be found in your Forms section of your Portal under “Labs and Documents”
Non-Discrimination Statement
Sanctuary Function Medicine does not discriminate in its patient care based on race, gender or religious affiliation. All patients are welcome to request care from the practice, although Dr. Potter reserves the right to respectfully decline to provide care outside of his field of practice or to continue a patient-physician relationship which is harmful to the patient or to himself.
Limitations Regarding the Outcome of Care
All humans, including physicians, are limited in power, knowledge and ability. While Dr. Potter will do his utmost to determine the cause of your suffering and to provide a remedy, he cannot guarantee any specific outcome.
God alone determines our destinies and only He knows all the intricacies of our being including our suffering. Dr. Potter will ask God to use him as a means to your healing and restoration, but cannot guarantee such results.
Further Explanations of Your Data Use and Storage
Hello,
Thank you for trusting us with your Contact Information and Data. Once you become a patient, your records will be stored in a HIPAA compliant Electronic Medical Records named CERBO housed off-site from Sanctuary at present, but may be moved on site in future. We also keep your data securely stored in a variety of other systems before and after enrollment as a patient. That includes a payment system called Stripe for digital payments like any other company services credit and debit payments. That includes a HIPAA secure contact software system called Active Campaign which allows email contact and interaction before and during enrollment. That includes a system called Call Loop which allows HIPAA secure SMS text messaging. The CERBO system also allows HIPAA secure SMS texting for appointment reminders and notifications of available portal messaging. We also have a newsletter that functions from a separate system as an educational resource that is blind to whether you are a patient or not. We also have an educational course system name Kajabi which you can access optionally and use for non-patient educational services.
Prior to enrollment as a patient, by consenting to our SMS, email, and phone contact, you grant us permission to store this data in these secure systems and use that data to market, conduct business, and track our interactions. You may request an opt-out for various individual forms of contact or complete opt-out of all contact.
While this amount of transparency can be a little overwhelming, for those who want to track the location of their contact data, it is made available.
Thank you for trusting us with your healthcare,
Dr. Eric Potter and the Sanctuary Team
HIPAA PRIVACY POLICY BELOW
When it comes to your health information, you have certain rights.
This section explains your rights and some of our responsibilities to help you.
-
Get a copy of your paper or electronic medical record
-
Correct your paper or electronic medical record
-
Request confidential communication
-
Ask us to limit the information we share
-
Get a list of those with whom we’ve shared your information
-
Get a copy of this privacy notice
-
Choose someone to act for you
-
File a complaint if you believe your privacy rights have been violated
For certain health information, you can tell us your choices about what we share.
If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.
-
In these cases, you have both the right and choice to tell us what to share
If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
-
In these cases we never share your information unless you give us written permission
-
In the case of fundraising
How do we typically use or share your health information?
We typically use or share your health information in the following ways.
-
Treat you
-
Run our organization
-
Bill for your services
How else can we use or share your health information?
We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes. For more information see: HHS.GOV consumer home .
-
Help with public health and safety issues
-
Do research
-
Comply with the law
-
Respond to organ and tissue donation requests
-
Work with a medical examiner or funeral director
-
Address workers’ compensation, law enforcement, and other government requests
-
Respond to lawsuits and legal actions
Electronic Access
We provide electronic access to your health information via the MD HQ Patient Portal.
- We are required by law to maintain the privacy and security of your protected health information.
- We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
- We must follow the duties and privacy practices described in this notice and give you a copy of it.
- We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.
This notice is effective as of 10/14/2026.