Privacy

The revalidation file and NPI registry are public. Your roster is not. Roster rows are stored against your account and are not mixed into another customer's pages. Exporting a roster asks you to confirm, because that file is a client list.

We do not take claim files, patient names, or medical records. Sending those would make this a HIPAA problem we are not set up for. We do not run analytics scripts on the app.

Sign-in is an email link. We store the email, the roster, orders, and Stripe customer ids. Closing the account starts a 90-day clock on the roster. Monthly CMS snapshots stay, because they contain no customer list.

Questions: privacy@mail.enrollmentwatch.com. The site itself is enrollmentwatch.com; mail is a separate host because sending and receiving each need their own DNS records.