Effective October 26, 2026.
This Privacy Policy explains how EVERYTHING Brand LLC ("we", "us") collects, uses, shares and protects information when you use everything · anesthesia — the website at everything-anesthesia.com, the web app, and the Induction apps for iPhone and Android. Questions and requests go to [email protected]. This policy is effective October 26, 2026.
We collect what we need to run a verified professional community and the tools in it, we protect the sensitive parts carefully, and we never sell your personal data or share it for advertising. The apps carry no advertising and no third-party tracking. Your NPI and legal name are never shown to other members. Anonymous means anonymous to other users — your identity is held privately and used only to let you in and to enforce the rules.
Account details: your email, a hashed password, your name, your mobile number (confirmed by a code we text you; each number backs one account), your role and credential, and the handle you choose.
Verification: for clinicians and residents, your NPI; for students, your accredited-program email, confirmed by a code and stored only as a one-way hash; a work-email code if you use one; and, if you attach one to a manual review, a scan of your license or certificate.
What you post and send: posts, replies, reviews, tips, pay reports, messages, files you upload, questions you ask Cerebro and other AI tools, and contracts you ask the Contract Analyzer to read.
Your credential vault: licenses, certifications and documents, and — only if you choose to store them — your Social Security number and date of birth, each kept in its own encrypted field.
The 1099 tracker: income, invoices, payers, shifts, expenses, mileage, vehicles, tax-home and estimated-payment records, and — only if you enter them — bank routing and account numbers and an EIN, encrypted.
School and program records, when your program uses the service: rotations, case logs, time logs, evaluations, exam attempts and results, compliance items, and absences.
Job search: saved jobs, job preferences, the states you work in, applications, résumés, and what you send employers.
Coaching, purchases and support: bookings, sessions, ratings and asks; orders, your shipping address and order history (card details go straight to our payment processor and never reach our servers); and what you send support or report about content.
Activity: the screens you open, lessons and questions you work through, study progress, searches and game plays. We keep this in detail for 90 days, then only as monthly totals.
Device and connection: device type, app version, browser family, your network address (our sign-in and activity records keep it only as a one-way hash), sign-in history used for security, crash reports, and the push-notification token for your device.
Screenshot reports: the phone apps tell us when a screenshot or screen recording is taken inside the app, recording only which section of the app and which kind of phone.
Problem alerts: when our team is looking into a problem with your account, they can turn on problem alerts for it. While they are on, we keep for 30 days what went wrong for you: a request the server refused or failed, a very slow one, or an error the app hit, with when and on which screen, never what you typed or read. Turning them on, and every look at what was kept, appears with its reason in Account → Privacy & Trust.
On your device: the app keeps your preferences, drafts and caches in your device's storage, and its keys in the phone's secure storage. There are no advertising cookies and no third-party analytics.
Location: only if you ask the job board to sort by distance; your device uses its location to sort the list on the device, and we do not receive it. Face ID and fingerprint checks happen on your device; we never receive biometric data.
The public NPPES registry, for the record behind the NPI you enter. Your school or program, for its roster, assignments and the records its staff enter. Employers, for messages and the stage of your application. Our payment processor, for payment status and receipts. Text-message providers, for whether a number can receive texts.
When you choose a password, we check it against a public list of breached passwords by sending only the first five characters of its one-way hash; the password itself never leaves our server.
To run the service and the features you use; to verify eligibility and keep one person to one account; to protect the service and its members from fraud, abuse and security threats; to take payments, ship orders, and pay coaches and vendors; to send codes, alerts, receipts and the notifications you choose; to shape your study (what to review next, your readiness); to answer AI questions; to moderate and enforce the Charter; to support you; to understand how the service is used, and to run, secure and improve it and research, develop and build new products, features and services; and to meet legal, tax and accounting duties and respond to lawful requests.
We collect and analyze activity and usage information (the screens opened, what is studied, searched and played, how long, on which device) for those purposes.
We use AI to screen posts, reviews and tips for rule-breaking, and to read the fields of a license you attach to a manual review so the reviewer can check it. A person decides anything held for review and every verification. Automated security checks may ask you to confirm it's you, or pause activity on an account, when they see signs of abuse.
Your Social Security number, date of birth, license numbers, identity documents, bank and tax records, case logs and messages are used only to do what you asked — to store them, show them to you, and share them when you create a link or apply. They are encrypted at rest, never used for advertising or profiling, and never used to infer anything about you.
We never sell or share health information, or your license, credential or identity details, with anyone except where you send them yourself (a share link, an application, your program) or the law requires it. We do not ask for information about your own health, and the service is not built to hold it.
When you use Cerebro, the Contract Analyzer or another AI feature, the text and any document you send go to our AI provider, Anthropic, to produce the answer. Anthropic's commercial terms do not permit it to train its models on that content. We record that a request was made, which feature, and its size and cost, to run usage limits; contracts you ask the Contract Analyzer to read, and its readings, are kept in your account until you delete them or the account.
If you choose to connect Google Calendar, we ask Google for permission to make one calendar of our own in your Google account and to add, change and delete events in that calendar only. We cannot see, change or delete anything else in your Google Calendar. Google also tells us the email address of the account you connected, so we can show you which one it is.
We use that permission only to keep that calendar matching your calendar in the app: your program's events, clinical shifts, due work and sign-up times. We store the access Google gives us encrypted, and we never sell or share it, or anything from your Google account. Disconnecting in the app deletes the calendar we made and ends our access; you can also remove our access at any time from your Google Account.
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train AI or machine-learning models.
Other members see what you post, under your handle or your anonymous credential label, with your credential badge.
Your school or program, if it sponsors your account, sees the program information above: your progress, case logs, evaluations, exam results, compliance items, absences and study activity.
Employers see what you send when you apply or message them. If you turn on "Let employers find me" (off by default), employers with a matching role see an anonymous card showing how you fit it, never your name or contact details, and may invite you to apply. Coaches see your bookings and messages with them. Whoever holds a share link you create sees what that link exposes until it expires or you revoke it.
Service providers who run parts of the platform for us, under contracts that limit their use of it: Render (our servers and database), Cloudflare (our website and, where we use it, storage for files that are already encrypted), Stripe (payments), Printful (making and shipping store orders), Telnyx and Twilio (text messages), Resend (email), Apple and Google (app distribution and push notifications), and Anthropic (AI features).
We disclose information when the law requires it, to answer valid legal process, to protect the rights, property or safety of our members, the public or the company, and to investigate fraud or abuse. If the company or the service is sold, merged or reorganized, information moves with it under this policy. Anything else, only with your consent.
We may share de-identified or aggregated information with partners, such as schools, employers, researchers and companies we work with. De-identified means it can no longer reasonably be linked to you. We keep it that way, we do not try to re-identify it, and we require anyone we give it to not to try either.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Your NPI is the anchor that confirms you entered a real provider's registry record and lets one NPI verify one account, so a banned account can't return under a new name. NPI numbers are public information — we do not treat the number itself as a secret and do not claim to protect it as one. We check it once against the public NPPES registry, store only a one-way hash plus the last four digits for the uniqueness check, discard the raw number, and never display it to other members or sell it.
The genuinely sensitive thing we hold is the mapping between your real identity and your anonymous posts — and the real protection is separation, not secrecy about public data. That mapping is access-controlled and is never joined to anonymous content in any query, screen, log, export, or API response we serve; anonymous posts leave our servers with no account identifier attached. We use the mapping for two purposes only: confirming eligibility at sign-up, and enforcing these terms (for example, anchoring a ban). Nothing else.
We will not voluntarily reveal who is behind a handle or an anonymous post. But no platform can promise absolute anonymity against the law: a valid court order — for example, in a defamation case — can compel disclosure. We tell you this plainly, so the promise we make is one we can keep: strong protection from other users and from us, not immunity from legal process.
Public: your posts and reviews, shown under your handle or your anonymous credential label, with your credential badge. Never public: your email, your phone number, your NPI, your legal name, your credential vault, your 1099 records, your case logs and your messages.
We keep information while your account is open and as long as needed for the purposes above. Detailed activity is kept for 90 days, then reduced to monthly totals.
When you delete your account, your own data is deleted — credentials and documents are deleted, not merely made unreadable. Content other people replied to stays, with your name removed from it. We keep what the law or the platform's integrity requires: our payment and accounting records, including the merch-credit ledger; records of actions other people took (who opened a file, moderation decisions); your acceptance of these terms; and a record that your mobile number was on an account, so each number backs one person's account. Copies held in backups are replaced on the backup schedule.
Traffic between your device and our servers is encrypted in transit. Passwords are stored only as salted hashes. Credential documents, identity documents, the sensitive vault and tax fields, and every message are encrypted at rest (AES-256-GCM) before they are stored, with keys held apart from the data. Two-step sign-in and passkeys are available, staff access to member data is limited and logged, and we will notify you of a breach affecting your data as the law requires.
No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
Download: Account → Privacy & Trust → Export my data saves what we hold on your account. Correct: edit your profile, or write to us. Delete: Account → Delete my account, or the delete-account page on our website. Notifications: Account → Notifications, reply STOP to a text, or turn off notifications in your device's settings. Anonymity: choose your handle or Anonymous each time you post.
Depending on where you live, including California and the other states with consumer privacy laws, you may have the right to know, access, correct, delete and port your information; to opt out of its sale, its sharing for targeted advertising, and profiling; and to limit the use of sensitive information. We do none of those things, so there is nothing to opt out of, but you can always ask. Send requests to [email protected] from the email on your account. We verify a request before acting on it, answer within the time the law allows, accept requests from an authorized agent with your signed permission, and, if we decline, you may appeal by replying to our answer. We never treat you differently for using these rights.
We honor the Global Privacy Control signal your browser may send; because we neither sell nor share your information for advertising, there is nothing further for it to turn off.
The service is for adults 18 and older and is not directed to children. If we learn we hold information from someone under 18, we delete it.
We are based in the United States and our servers are in the United States. If you use the service from elsewhere, your information is processed in the United States.
We may update this policy. We will tell you about a material change in the app or by email before it takes effect. The effective date above says which version you are reading.
© 2026 EVERYTHING Brand LLC. All rights reserved. Content is fingerprinted and monitored.