Last updated July 2026.
We collect what we need to run a verified professional community, we protect the sensitive parts carefully, and we never sell your personal data. Your NPI and legal name are never shown to other members. Anonymous means anonymous to other users — your identity is held privately and used only to let you in and to enforce the rules.
Account details: your email, a hashed password, and an optional phone number for recovery. Verification details: for clinicians and residents, your NPI; for students, your accredited-program email. Your chosen credential and handle. The content you post. And minimal usage data to keep the service working and secure.
Your NPI is the anchor that confirms you entered a real provider's registry record and lets one NPI verify one account, so a banned account can't return under a new name. NPI numbers are public information — we do not treat the number itself as a secret and do not claim to protect it as one. We check it once against the public NPPES registry, store only a one-way hash plus the last four digits for the uniqueness check, discard the raw number, and never display it to other members or sell it.
The genuinely sensitive thing we hold is the mapping between your real identity and your anonymous posts — and the real protection is separation, not secrecy about public data. That mapping is access-controlled and is never joined to anonymous content in any query, screen, log, export, or API response we serve; anonymous posts leave our servers with no account identifier attached. We use the mapping for two purposes only: confirming eligibility at sign-up, and enforcing these terms (for example, anchoring a ban). Nothing else.
We will not voluntarily reveal who is behind a handle or an anonymous post. But no platform can promise absolute anonymity against the law: a valid court order — for example, in a defamation case — can compel disclosure. We tell you this plainly, so the promise we make is one we can keep: strong protection from other users and from us, not immunity from legal process.
Public: your posts and reviews, shown under your handle or your anonymous credential label, with your credential badge. Never public: your email, your phone number, your NPI, and your legal name.
We do not sell personal data. We share it only with the service providers that run the platform — hosting, email delivery, and payment processing — under contracts that limit their use of it, and where the law requires.
We protect sensitive information in transit and at rest, and we will notify you of a breach affecting your data as the law requires. You can access and correct your information and request deletion of your account — though some records may be retained where needed to enforce a ban or meet a legal obligation.
The service is for professionals 18 and older and is not directed to children. We may update this policy and will announce material changes in the app.
This is a plain-language draft describing real intended practice. It is not legal advice, and it must be reviewed and finalized with a qualified attorney before launch.