In short
- No patient or beneficiary data, ever. The provider data is CMS's public release.
- For an account we keep your email address and what you bought. Card details stay with Stripe.
- We do not sell personal information and we do not use advertising or tracking cookies.
- We count steps such as searches, sample views, checkouts and report opens in our own log, without cookies and with a visitor key that changes daily and no stored IP address; it is deleted after 13 months.
- You can delete your account from the account page. Its data is deleted 30 days after the request and leaves backups within 35 days after that.
Providers in the data
Provider pages show what CMS publishes about each NPI in its Medicare Part B public use files and its Doctors and Clinicians data: name, credentials, specialty, practice location on claims, affiliations and billing statistics. We add calculations (work RVU totals, percentiles, ranks) described on the methodology page. Street addresses are not shown unless the provider turns them on. Providers can ask for a correction (Corrections) and claim their page (Claim your page).
What we collect, and why
| What | Why | Kept |
|---|---|---|
| Email address; sign-in link and session records (stored as one-way hashes) | Your account and signing in | Until the account is deleted; sign-in links expire in 15 minutes, sessions after 30 days unused |
| Purchases: product, what it covers, price and price version, any report credit applied, tax, date, data years included, the version of the Terms and refund policy you accepted and when, delivery records (when the report was first and last opened or downloaded, when the confirmation was sent), Stripe customer and payment ids | Giving you access, receipts, report credits, support and refunds, and showing what was delivered if a charge is questioned | While the account exists. At deletion the purchase is unlinked from you and what it unlocked is removed, along with the physician or market it covered; its product, price and policy versions, amount, tax, date, data years, delivery times and Stripe payment ids stay as an accounting record for tax purposes. Unused report credits end with the account. We do not delete your Stripe customer record: Stripe keeps its customer and payment records under its own retention policy |
| Support requests: the reason, the purchase, your message, your email address, our answer and the outcome | Answering duplicate charges, access or delivery problems and refund requests | 3 years after the request closes, with your email address removed if you delete the account |
| Event log: the name of a step (for example search, sample report viewed, checkout started, payment completed, report opened), the time, the product and price version, the physician or market of the page, and a visitor key: a keyed one-way hash of the IP address and browser that changes every day; the IP address and browser themselves are not stored. No cookie is set for it, nothing about any figure is recorded, and no key is kept when your browser sends Do Not Track or Global Privacy Control. Signed-in steps also carry your account id | Counting how many visitors with usable data buy a report, whether reports are delivered and opened, and how many need support, by price version | 13 months, then deleted. Revenue is counted from purchases, not from this log |
| A verified NPI: the number, entity type, the qualifying taxonomy code, the time of the check | Claiming a page, and the area of an earlier Local report. It does not unlock any figure | Until you verify another NPI or delete the account |
| Page claims: NPI, level, method, time, and a one-way hash of the phone number or email address used | Edit access for a claimed page, and email notices: when CMS releases new data for the page and when a correction request on it is opened or closed | Until you release the claim or delete the account |
| State license number and photo ID uploaded for a license review | Checking an edit-level claim by hand | Deleted when the reviewer decides, and within 30 days in any case |
| Provider-supplied statement, website, contact line and street-address setting | Showing them on the claimed page | Until the provider changes or removes them; they stay in place across data refreshes. Deleting the edit-level account that added them removes them, unless another verified account manages the page |
| Correction requests: the text, your email address, the page, our decision and its log | Deciding and recording corrections | 3 years after the ticket closes |
| Server logs: IP address, browser, page requested, time, response | Security, rate limits and fixing errors | 90 days at most, then deleted. The web server keeps no separate access-log file |
| Rate-limit counters (keyed by a keyed hash of an IP address or email address, never the value) | Limiting sign-in, lookup and form requests | 2 days |
Backups of the database are kept on a 35-day rolling window: each backup is deleted when it is 35 days old, so anything deleted from the site is gone from every backup within 35 days.
Cookies
Two first-party cookies, no others: cl_session, which keeps you signed in (HttpOnly, 30 days, renewed while you use the site), and cl_auth, which only tells the page header whether to show "Sign in" or "Account". No analytics, advertising or third-party cookies. The event log above is kept on our own server, sets no cookie and is not shared with any analytics or advertising company.
Who processes it for us
- Google Cloud hosts the site, its database and the backups (United States).
- Stripe takes payments and handles card details, receipts and refunds. Stripe keeps its own records under its retention policy, including after you delete your account here.
- Our email provider sends sign-in links, receipts, correction acknowledgements and page notices.
- The NPI Registry (CMS NPPES) receives the NPI you enter when you verify an NPI or claim a page.
- A voice-call provider places the verification call when you choose phone verification for a claim; it receives the practice phone number from the NPPES record and the code.
Each receives only what its task needs. We do not sell or rent personal information, and we do not share it for advertising.
Your choices
- Delete your account: on the account page, or write to ben@claimlight.io from the account's email address. The account and its personal data are deleted 30 days after the request (you can cancel until then) and leave backups within 35 days of the deletion. Correction tickets (3 years) and support requests (3 years) you filed are kept for their period with your email address removed; purchases stay as anonymized accounting records, and event log entries lose their link to the account.
- See or correct what we hold about you: the account page shows your purchases, NPI and claims; write to us for anything else.
- A provider page: use Corrections for errors and Claim your page for the street-address setting and provider-supplied details. CMS publishes the underlying data; we cannot remove a provider from it.
Security
Traffic is encrypted. Sign-in links, sessions and claim contacts are stored as one-way hashes. Access to the database and backups is limited to the people who run the site.
Children
The site is for adults working in or around health care. We do not knowingly collect information from anyone under 16.
Changes and contact
We post changes here with a new effective date and email account holders about material changes. Questions: ben@claimlight.io. Corrections: corrections@claimlight.io. Pacific Clinical Solutions LLC operates claimlight.io.