Your privacy is our priority. Learn how we collect, use, and protect your healthcare data.
At MedReveal, we are committed to protecting your privacy and handling your healthcare data with the highest standards of security and compliance. This privacy policy explains how we collect, use, and safeguard your information when you use our platform.
Account Information
Name, email address, and password used to create and access your account
Professional Information
NPI number, practice/organization name, and professional credentials
Healthcare Data
CPT codes, billing volumes, specialty information, and healthcare provider data
Search Activity
Search queries, filters applied, and interaction patterns within the platform
AI Assistant (MCP) Activity
When you connect an AI assistant such as Claude or ChatGPT to MedReveal through our MCP server, we log each tool call: your account ID, the tool used, the parameters sent (for example a billing code, payer, or NPI), the time, and whether the call succeeded
Contact Form Submissions
Name, email address, subject, and message content from contact forms
Support Communications
Communications with our support team and responses to inquiries
Authentication Data
Login sessions and authentication tokens managed through Google Sign-In and AWS Cognito, plus OAuth access tokens issued to AI assistants you authorize
Device and Log Data
IP address, browser and device type, pages viewed, and referring site, collected through Google Analytics and our server logs
Error and Session Diagnostics
Error reports and, for a sample of sessions and any session where an error occurs, a recording of page interactions, collected through Sentry to find and fix bugs. These may include your IP address and account identifier
Process and analyze healthcare data to provide benchmarking, pricing insights, and market intelligence
Create, maintain, and secure your account and profile information
Send important updates, respond to inquiries, and provide customer support
Analyze usage patterns to improve our services and develop new features
Comply with healthcare regulations, privacy laws, and legal requirements
We do not sell, rent, or lease your personal information to third parties
We share data with service providers who help us operate the platform, only as needed for their service: Amazon Web Services (hosting, database, authentication), Google (Sign-In and Google Analytics), Sentry (error monitoring), and our email delivery provider
If you connect an AI assistant to MedReveal, the results of your requests are sent to that assistant. Its provider (for example Anthropic or OpenAI) handles that data under its own privacy policy. You can revoke an assistant's access at any time by disconnecting it
We may disclose information when required by law, court order, or to protect our rights and safety
In the event of a merger, acquisition, or sale of assets, your data may be transferred
All data is encrypted in transit using TLS and at rest using AES-256 encryption via AWS Key Management Service
Authentication via Google Sign-In or AWS Cognito with role-based access controls
Data stored in Amazon RDS within a secure VPC with network isolation and automated backups
We only collect data necessary for providing our services. We do not collect Protected Health Information (PHI)
Kept while your account is active and deleted when you ask us to close it, unless we must keep it to meet a legal obligation
Search history and MCP tool-call logs are kept while your account is active, to provide usage history and investigate abuse, and are deleted with your account
Google Analytics and Sentry keep their data for the retention periods set in those services
Request a copy of the personal information we have collected about you
Update or correct inaccurate or incomplete personal information
Request deletion of your personal information, subject to legal and business requirements
Receive your data in a structured, commonly used format
Control marketing communications and data sharing preferences
Required for authentication and basic platform functionality
We use Google Analytics cookies to understand how visitors use our site. You can block them in your browser settings or with Google's Analytics opt-out browser add-on. We do not use advertising cookies or sell data to advertisers
Cookies are used to maintain secure login sessions and remember your preferences
If you have any questions about this privacy policy or our data practices, please don't hesitate to contact us.
Contact UsThis privacy policy was last updated on November 4, 2026