Notice of privacy practices

Patient Care Circle ("PCC", "we") is a secure care-coordination service that lets a patient and the separate clinicians treating them share messages and documents, with the patient controlling who is in their circle and what each provider can see. PCC is not an electronic health record and does not diagnose or treat.

When we handle health information on behalf of a healthcare provider, we act as their Business Associate under HIPAA. This notice supplements — and does not replace — the Notice of Privacy Practices that your own provider gives you.

Information we process

• Account information — name, email, role, and (for clinicians) profession and verification details.
• Consent records — which providers you've added and the categories of information you've shared with each.
• Coordination content — secure messages and documents you or your providers upload, plus non-identifying metadata about them.
• Security & audit data — sign-in and access events used to protect your account and maintain a tamper-evident record.

How we use it

We use this information solely to provide the coordination service: to authenticate you, to route messages and documents to the people you've authorized, and to keep the audit trail. We do not sell personal information, and we do not use health information for advertising.

If you opt in to text notifications, we use your mobile number only to send those alerts (which never contain health information). We do not sell or share your mobile number or SMS opt-in information with third parties or affiliates for their marketing. See our SMS Messaging Terms for how to opt out.

Your controls

• You decide who is in your circle and can remove a provider at any time.
• Consent is per-category and revocable — revoking is effective immediately for future access.
• Access & export — you can review what has been shared and request a copy.

Security, sharing & retention

We protect information with encryption, strict access control, and a permanent audit log — see our security documentation. We share data only with the vetted subprocessors needed to run the service, under agreements that restrict their use of it. Operational data is disposed of on a schedule; the audit log is retained as required.

Contact

Privacy questions or requests: privacy@patientcarecircle.com. This is not a channel for emergencies — call 911.