Privacy Policy

Last Updated: 5/28/2026

1. Information We Collect

When you use MedBadge, we collect the following types of information:

  • Account Data: Name, email address, and authentication identifiers provided via Google Auth or Email login.
  • Professional Data: State license numbers, National Provider Identifiers (NPI), and expiration dates you choose to upload.
  • Peer Review Data: Text reviews, ratings, and commendation tags provided by your peers or patients.
  • Usage Data: Analytics, IP addresses, and cookie data to improve the Service.

2. CMIA & Health Data Disclaimer

MedBadge strictly forbids the upload of patient records or Protected Health Information (PHI). Therefore, we do not act as a Business Associate under HIPAA. To the extent any user violates this policy and uploads PHI, that user assumes full liability under the Confidentiality of Medical Information Act (CMIA) and federal law.

3. How We Share Your Information

By default, your MedBadge portfolio is Public. The purpose of this platform is to showcase your verified credentials to the world.

  • Enterprise Partners: If you utilize our Applicant Tracking System (ATS) features or unlock the Recruiter Gate, your data (including resume exports) will be securely shared with verified Healthcare Facilities and Staffing Agencies.
  • Service Providers: We share necessary billing information with Stripe to process subscriptions. We utilize Google Firebase for secure data storage.
  • Legal Compliance: We may disclose your information if required to do so by law or subpoena.

4. CCPA and GDPR Compliance (Your Data Rights)

Under the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR), you possess specific rights regarding your personal data:

  • The Right to Access: You can request a copy of the personal data we hold about you.
  • The Right to be Forgotten (Erasure): You can request that we completely delete your MedBadge profile, reviews, and uploaded documents from our Firestore databases.
  • The Right to Opt-Out: You may opt-out of having your portfolio indexed or shared with Enterprise recruitment partners.

To exercise these rights, please contact us using the Automated Support Widget or via our designated legal email address.

5. Cookies and Tracking

We use strictly necessary cookies to maintain your authenticated session via Firebase Auth. We may also use analytics cookies to understand how our SaaS platform is utilized to improve user experience. You may configure your browser to block these cookies, though some features of the site may cease to function.