Privacy Policy

We collect information you provide directly to us, information collected automatically when you use our website, and information from third-party sources. The types of information we may collect include:

Personal Identification Information

• Full name, email address, phone number, and mailing address
• Healthcare provider license numbers, NPI numbers, and credentials
• Organization name, tax identification numbers, and business information
• Payment information for billing services (processed through secure third-party processors)

Automatically Collected Information

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and links clicked
• Referring URLs and search terms used to find our website
• Cookie data and similar tracking technologies (see Section 6)

We use the information we collect for the following purposes:

• To provide, operate, and improve our credentialing, billing, and referral services
• To process enrollment applications and submit them to payers on your behalf
• To communicate with you about service updates, appointments, and account matters
• To send marketing and educational communications (with your consent)
• To comply with legal obligations, including HIPAA and Medicare/Medicaid regulations
• To detect, investigate, and prevent fraudulent or unauthorized activity
• To analyze website usage and improve user experience

HealthsDriven operates as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when handling Protected Health Information (PHI) on behalf of covered healthcare entities.

Our HIPAA Commitments

• PHI is used only as permitted under your BAA and applicable HIPAA regulations
• We implement administrative, physical, and technical safeguards to protect PHI
• PHI is never disclosed to unauthorized parties or used for marketing purposes
• We report any breaches of unsecured PHI as required by the Breach Notification Rule
• All staff with access to PHI receive HIPAA compliance training

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

We implement industry-standard administrative, technical, and physical safeguards to protect your personal information and PHI from unauthorized access, use, alteration, or destruction.

• SSL/TLS encryption for all data transmitted through our website and portals
• Role-based access controls limiting employee access to information on a need-to-know basis
• Regular security assessments, vulnerability testing, and staff training
• Encrypted storage for sensitive provider and patient data
• Incident response procedures aligned with HIPAA Breach Notification requirements

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to contact us immediately if you suspect unauthorized access to your account.

Our website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver relevant content. We use the following types of cookies:

• Essential Cookies: Required for the website to function. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the site (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant ads through Google Ads and Meta Ads platforms.
• Functional Cookies: Remember your preferences and settings for a better experience.

You may control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For more information, visit allaboutcookies.org.

Our website may contain links to third-party websites, including Medicare, Medicaid portals, CAQH, and insurance company websites. These sites have their own privacy policies, and we have no control over or responsibility for their content or privacy practices.

We encourage you to review the privacy policy of any third-party site you visit. Our Privacy Policy applies only to information collected through our website and services.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Opt-Out: Unsubscribe from marketing emails at any time using the link in any email
• Portability: Request transfer of your data to another service provider where technically feasible
• Restriction: Request that we limit how we process your information in certain circumstances

To exercise any of these rights, please contact us at info@healthsdriven.com. We will respond to your request within 30 days.

Our website and services are directed to healthcare professionals and agencies. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at info@healthsdriven.com and we will promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email of significant changes
• Post a notice on our homepage for at least 30 days after changes take effect

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.