Last updated:
PLU Health, Inc. ("PLU Health," "we," "us," or "our") operates an intelligent healthcare provider directory platform that helps patients find care and helps hospitals, health systems, and insurance companies manage their provider networks. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, applications, and related services (collectively, the "Service").
This policy applies to all visitors, patients searching our directory, healthcare providers, and organizational users who interact with our Service. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with the practices described in this policy, please do not use the Service. We encourage you to review this policy periodically as it may be updated to reflect changes in our practices or applicable law.
We collect information you provide directly to us, such as your name, email address, phone number, insurance details, and search preferences when you create an account or use our directory search tools. Healthcare providers and organizations may submit credentialing information, specialties, locations, and availability data.
We also automatically collect certain technical information, including your IP address, browser type, device identifiers, pages viewed, and search queries, through cookies and similar tracking technologies described in Section 9.
Where applicable and permitted, we may collect protected health information ("PHI") submitted by covered entities or business associates for the purpose of network management and credential verification.
We use collected information to operate, maintain, and improve the Service, including matching patients with appropriate providers, verifying provider credentials against sources such as NPPES and NPI registries, and personalizing your directory search experience.
Information may also be used to communicate with you about your account, respond to inquiries, send service-related notices, detect and prevent fraud or misuse, and comply with legal and regulatory obligations applicable to healthcare directory services.
Aggregated or de-identified data may be used for analytics, research, and reporting purposes that help us improve network accuracy and platform performance without identifying any individual.
PLU Health maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of protected health information ("PHI") in accordance with the Health Insurance Portability and Accountability Act ("HIPAA") where applicable to our services.
Where PLU Health acts as a business associate on behalf of a covered entity, we enter into a Business Associate Agreement ("BAA") governing the permitted uses and disclosures of PHI, breach notification procedures, and data handling requirements.
Patients using our public directory to search for providers are not required to submit PHI, and we recommend avoiding the inclusion of sensitive medical details in general search fields or support inquiries.
We do not sell your personal information. We may share information with healthcare organizations and insurance partners who use our platform to manage their provider networks, with your consent or as necessary to facilitate directory listings and network matching.
We may disclose information to trusted third-party service providers who perform functions on our behalf, such as hosting, credential verification, analytics, and customer support, subject to confidentiality obligations consistent with this policy.
We may also disclose information when required by law, to protect our rights or the safety of our users, or in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.
We implement industry-standard security measures, including encryption in transit and at rest, access controls, network monitoring, and regular security assessments, to protect information against unauthorized access, alteration, or destruction.
While we strive to protect your information using commercially reasonable safeguards, no method of transmission or storage is completely secure. We encourage users to safeguard their account credentials and report any suspected unauthorized access immediately.
We retain personal and provider information for as long as necessary to fulfill the purposes described in this policy, including maintaining accurate directory listings, complying with legal obligations, resolving disputes, and enforcing our agreements.
Where PHI is involved, retention periods will align with applicable HIPAA requirements and any Business Associate Agreement in place. Upon expiration of applicable retention periods, information will be securely deleted or de-identified.
Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, as well as the right to object to certain uses or request a copy of your data in a portable format.
You may update your account information directly through your account settings or submit a request to our privacy team using the contact details in Section 14. We will respond to verified requests in accordance with applicable law.
Providers and organizations may request corrections to directory listings or credentialing information at any time by contacting our support team.
We use cookies, pixel tags, and similar technologies to remember your preferences, keep you logged in, understand how visitors use our directory, and improve the performance and relevance of our search results.
We work with third-party analytics providers to help us understand aggregate usage patterns. You can manage cookie preferences through your browser settings, though disabling certain cookies may limit functionality of the Service.
Our Service may integrate with or link to third-party databases and services, including NPPES, NPI registries, insurance verification tools, and provider scheduling platforms. These third parties maintain their own privacy practices governing the information they collect.
PLU Health is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party service before providing information to them.
Our Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child without appropriate consent, we will take steps to delete such information promptly.
Parents or guardians who believe their child has provided personal information to us should contact our privacy team using the details in Section 14.
PLU Health primarily operates within the United States, and information collected through the Service is generally processed and stored in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in a jurisdiction with different data protection laws.
Where required, we implement appropriate safeguards to ensure that any cross-border transfer of personal information complies with applicable data protection regulations.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Material changes will be communicated via email or a prominent notice on the platform at least 15 days before taking effect.
Your continued use of the Service after any such changes take effect constitutes your acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy or how we handle your information, please contact our privacy team using the information below. We aim to respond to all inquiries within 3-5 business days.
Our legal and support teams are happy to help clarify anything.
Company
About UsCareersPressBlogContactFor Providers
Join PLU HealthProvider LoginManage ProfileAnalyticsAPI AccessResources
Help CenterPatient GuideInsurance 101Find a SpecialistHealth ArticlesLegal
Privacy PolicyTerms of UseHIPAA NoticeCookie PolicyAccessibility