Privacy Policy

Your privacy is our priority. Learn how we collect, use, and protect your healthcare data.

Our Commitment to Your Privacy

At MedReveal, we are committed to protecting your privacy and handling your healthcare data with the highest standards of security and compliance. This privacy policy explains how we collect, use, and safeguard your information when you use our platform.

Information We Collect

Personal Information

Account Information

Name, email address, and password used to create and access your account

Professional Information

NPI number, practice/organization name, and professional credentials

Usage Data

Healthcare Data

CPT codes, billing volumes, specialty information, and healthcare provider data

Search Activity

Search queries, filters applied, and interaction patterns within the platform

Communication Data

Contact Form Submissions

Name, email address, subject, and message content from contact forms

Support Communications

Communications with our support team and responses to inquiries

Technical Data

Authentication Data

Login sessions and authentication tokens managed through Google Sign-In and AWS Cognito

How We Use Your Information

Provide Healthcare Analytics Services

Process and analyze healthcare data to provide benchmarking, pricing insights, and market intelligence

Account Management

Create, maintain, and secure your account and profile information

Communication

Send important updates, respond to inquiries, and provide customer support

Platform Improvement

Analyze usage patterns to improve our services and develop new features

Legal Compliance

Comply with healthcare regulations, privacy laws, and legal requirements

Data Sharing and Disclosure

We Do Not Sell Your Data

We do not sell, rent, or lease your personal information to third parties

Service Providers

We may share data with trusted service providers who help us operate our platform (hosting, email, analytics)

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred

Data Security

Encryption

All data is encrypted in transit using TLS and at rest using AES-256 encryption via AWS Key Management Service

Secure Authentication

Authentication via Google Sign-In or AWS Cognito with role-based access controls

Secure Infrastructure

Data stored in Amazon RDS within a secure VPC with network isolation and automated backups

Data Minimization

We only collect data necessary for providing our services. We do not collect Protected Health Information (PHI)

Your Rights and Choices

Access Your Data

Request a copy of the personal information we have collected about you

Correct Your Information

Update or correct inaccurate or incomplete personal information

Delete Your Data

Request deletion of your personal information, subject to legal and business requirements

Data Portability

Receive your data in a structured, commonly used format

Opt-Out Options

Control marketing communications and data sharing preferences

Cookies and Tracking

Essential Cookies Only

We use only essential cookies required for authentication and basic platform functionality

No Third-Party Tracking

We do not use third-party analytics, advertising, or tracking cookies

Session Management

Cookies are used to maintain secure login sessions and remember your preferences

Questions About Your Privacy?

If you have any questions about this privacy policy or our data practices, please don't hesitate to contact us.

Contact Us

This privacy policy was last updated on January 16, 2026