Privacy Policy

1. Important Note on Protected Health Information (PHI)

GeriPro is a business associate to healthcare providers and Skilled Nursing Facilities (SNFs).

• Website Data vs. Patient Data: This Privacy Policy covers data collected directly through our public website.
• HIPAA Governance: Any Protected Health Information (PHI) or resident medical records uploaded via our secure client portals for Medicare Part B auditing and billing are strictly governed by the Health Insurance Portability and Accountability Act (HIPAA) and our executed Business Associate Agreements (BAAs) with our clients—not by this website privacy policy.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you. This includes:

• Voluntary Information: Name, corporate email address, phone number, and facility name when you submit a contact form, request an audit, or sign up for an account.
• Portal Credentials: Usernames, passwords, and security verification logs used to access secure billing dashboards.
• Automated Device Information: IP addresses, browser types, operating systems, and page-view data collected via standard cookies to optimize website performance.

3. How We Use Your Information

We use the data we collect exclusively for business operations, including to:

• Provide, maintain, and optimize our medical billing and revenue recovery services.
• Securely authenticate client users entering our billing portals.
• Respond to your inquiries, customer service requests, or contact forms.
• Ensure compliance with federal healthcare billing regulations and state laws.
• Prevent fraudulent activities, unauthorized login attempts, and data breaches.

4. How We Share Your Information

GeriPro does not sell, rent, or trade your personal information to third parties. We only share information in the following limited circumstances:

• With Trusted Service Providers: Contractors or vendors who host our secure servers, manage our portal software, or assist our audits, provided they are bound by strict confidentiality agreements.
• For Legal Obligation: To comply with valid legal processes, government audits, or subpoenas issued by the Centers for Medicare & Medicaid Services (CMS) or law enforcement.

5. Data Security

We implement robust administrative, technical, and physical security measures designed to protect your information. Secure portal connections utilize advanced encryption protocol standards to safeguard all data in transit. However, please remember that no digital transmission over the internet can be guaranteed 100% secure.

6. Your Rights and Choices

Depending on your operational location, authorized facility users may have the right to request access to, correction of, or deletion of their corporate contact details. To submit a request, please contact us at agambrill@geripro.com.

7. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our operational or legal obligations. We will notify you of any material changes by updating the “Effective Date” at the top of this policy.