HIPAA statement
This website is for hearing care practice owners. It collects no patient information, and it is not a notice of privacy practices for any practice.
What it is, is a statement of how we handle patient data belonging to the practices we work with, because some of what we do requires us to hold it.
Every client signs a Business Associate Agreement before we touch patient data.
The agreement is put in place between your practice and Ear Level Marketing at the first step of intake, and nothing touches your patient records until that agreement is executed. Every practice, every time, not on request.
Every vendor in the chain that handles patient data on our behalf is under a Business Associate Agreement with us. That includes the carrier that physically delivers text messages. Most companies offering marketing to healthcare practices cannot say that, because most consumer messaging platforms will not sign one.
Patient messaging runs on a HIPAA-compliant platform rather than on a general marketing tool with patient names pasted into it.
At the end of a database reactivation campaign, the patient data you sent us for it is purged.
You are the custodian of these records and the exposure is yours. If your compliance officer or your attorney wants to read the agreement before you send us anything, that is a reasonable thing to want, and the order above is built so that they can.