Back to Home

Privacy Policy

Last updated: March 2026

1. Information We Collect

When you create an account on Sanum, we collect:

  • Name, email address, and login credentials
  • Professional credentials (NPI number, license information, specialty)
  • Practice information (name, address, borough, insurance accepted)
  • Profile photos you choose to upload
  • Referral data you enter (patient initials, age range, categories — no PHI in MVP)
  • Messages exchanged between connected providers
  • Usage data (pages visited, features used, timestamps)

2. How We Use Your Information

  • To verify your professional credentials and approve your account
  • To display your profile to other verified providers and patients
  • To facilitate provider connections and patient referrals
  • To send notifications about referrals, connections, and messages
  • To improve our platform and develop new features
  • To comply with legal obligations

3. HIPAA and Protected Health Information

The current version of Sanum (MVP) does not collect, store, or transmit Protected Health Information (PHI) as defined by HIPAA. Referral data is limited to patient initials, age ranges, and high-level clinical categories.

When PHI features are activated for your organization (requires a signed Business Associate Agreement), additional privacy protections apply including encryption at rest, audit logging, and access controls. See our HIPAA Notice for details.

4. Data Sharing

We do not sell your personal information. We share data only with:

  • Other verified providers you connect with (profile information)
  • Patients searching for specialists (public profile information)
  • Service providers that help us operate the platform (hosting, email)
  • Law enforcement when required by law

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your data within 30 days, except where retention is required by law. Audit logs related to PHI access are retained for a minimum of 6 years per HIPAA requirements.

6. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Export your data in a portable format

7. Contact

For privacy-related requests or questions, contact us at: privacy@sanumnetwork.com