This policy describes how Certicare collects, uses, and shares information on certicare.io, our platform for licensed healthcare providers. Patient-facing services operate at certicare.org and are covered by the certicare.org privacy policy.
1. What this policy covers
This policy applies to the certicare.io website, the provider application form, and provider subscription accounts. It does not cover the clinical content of documents that providers create; those documents are the issuing provider's own records.
2. Information we collect
- Application information. When you apply to join, we collect your name, email address, credential type, license state(s), NPI number, practice name (if provided), and anything you include in the notes field.
- Account and billing information. When subscriptions are active, we collect account details and subscription status. Payments are processed by Stripe; we do not store full payment card numbers.
- Correspondence. Emails and messages you send us.
- Technical information. Our hosting provider collects standard server logs (such as IP address, browser type, and pages visited) needed to operate the site.
3. How we use information
- To review provider applications, including verifying licenses and NPI numbers against public registries.
- To create and manage accounts, provide the service, and process subscription payments.
- To respond to questions and provide support.
- To operate, secure, and improve the website.
- To comply with legal obligations.
4. How we share information
We do not sell personal information, and we do not share it for third-party advertising. We share information only with service providers who help us run the business: website hosting, cloud document and email services, and payment processing. We also share information where required by law or to protect our legal rights.
5. Credential verification
By submitting a provider application, you authorize us to confirm the credentials you provide against publicly available sources, such as state license lookups and the NPI registry.
6. Data retention
We keep application and account records for as long as needed to operate the service and meet legal and business record-keeping obligations. You may request deletion of your application data at any time (see Section 8).
7. Security
We use reputable service providers and limit access to personal information to what is needed to run the service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your choices and rights
You may request access to, correction of, or deletion of your personal information by emailing support@certicare.org. Depending on where you live, you may have additional rights under state privacy laws; we honor applicable requests regardless of state.
9. Children
certicare.io is intended for licensed healthcare professionals and is not directed to anyone under 18. We do not knowingly collect information from minors.
10. Changes to this policy
If we make material changes, we will update the effective date at the top of this page and, for account holders, provide notice by email.
11. Contact
Questions about this policy: support@certicare.org.