Legal
Privacy Policy
Last updated: July 25, 2026
MedProH is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our healthcare staffing platform.
1. Who We Are
MedProH ("we", "us", or "our") is a healthcare staffing platform that connects medical professionals with healthcare facilities. Our platform is operated by MedProH Inc. and is accessible via our mobile applications and website at medproh.app.
For privacy-related inquiries, contact us at: privacy@medproh.app
2. Information We Collect
2.1 Information You Provide
For Healthcare Professionals:
- Full name, email address, and password
- Phone number and date of birth
- Home address (street, city, state, ZIP)
- Professional license type, number, and issuing state
- Years of experience
- Bank account information for direct deposit (collected and processed directly by Stripe, our payment processor — MedProH never sees or stores your bank details)
For Healthcare Facilities:
- Facility name, type, and NPI number
- Facility address and contact information
- Contact person name and title
- Payment method (processed by Stripe)
2.2 Information Collected Automatically
- Device information (device type, operating system, device ID)
- Location data — your device's GPS coordinates, captured only at the moment you check in to or check out of a shift
- Push notification tokens (APNs for iOS, FCM for Android)
- App usage data and shift activity logs
- IP address and connection information
2.3 Information from Third Parties
- License verification data from state nursing boards
- Payment processing information from Stripe
3. How We Use Your Information
- To match healthcare professionals with available shifts based on location and qualifications
- To process payments and issue tax documents (1099-NEC)
- To verify professional licenses with state licensing boards
- To send push notifications about shift opportunities and updates
- To communicate important account and service information
- To send password reset emails and transactional notifications
- To prevent fraud and ensure platform safety
- To comply with legal obligations
- To improve our services and user experience
4. Sensitive Information
Social Security Numbers: MedProH never collects or stores your Social Security Number. Tax identity information (including SSN, where required) is collected directly by Stripe, our payment processor, on Stripe's own secure pages for identity verification and IRS 1099 tax reporting. It is governed by Stripe's Privacy Policy, and MedProH has no access to it.
We treat the following as sensitive information requiring heightened protection:
- Financial account information
- Professional license information
- Location data
5. How We Share Your Information
5.1 With Healthcare Facilities
When you accept a shift, the facility receives your full name, license type, and contact information necessary to coordinate your assignment.
5.2 With Service Providers
- Amazon Web Services (AWS) — Cloud infrastructure and data storage
- Stripe — Payment processing and Stripe Connect for professional payouts
- Google — Address autocomplete (Google Places API) and Firebase push notifications
- Apple — Push notifications via APNs
5.3 Legal Requirements
We may disclose your information when required by law, court order, or government authority, or when necessary to protect the rights, property, or safety of MedProH, our users, or others.
5.4 We Do Not Sell Your Data
MedProH does not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Data Security
We implement industry-standard security measures to protect your information:
- All data transmitted is encrypted using TLS 1.3
- Sensitive data is encrypted at rest
- Access to production systems is restricted and audited
- Regular security reviews and vulnerability assessments
- AWS infrastructure with SOC 2 compliance
7. Data Retention
- Active account data is retained for the duration of your account
- Shift and payment records are retained for 7 years for tax and legal compliance
- When you delete your account, the information that identifies you is erased immediately — not on a schedule. Shift, timecard and payment records are retained for the periods above, keyed to an identifier that no longer refers to any person. See Account Deletion
8. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and personal data
- Portability: Receive your data in a machine-readable format
- Opt-out: Opt out of non-essential communications
To exercise these rights, contact us at privacy@medproh.app
9. Location Data
We collect your location at two moments only: when you check in to a shift, and when you check out of it. Each is a single reading taken at the instant you tap the button, while the app is open and in front of you.
We use it for one purpose. A shift is paid on the basis that the professional was physically at the facility, so the app confirms your device is within approximately 402 metres of the shift's posted address before a check-in is accepted. Those coordinates are written to the shift's timecard and kept as part of that record, because the timecard is the evidence behind what the facility is billed and what you are paid.
To be precise about what we do not do:
- We do not collect your location in the background. The app has no background location permission and cannot read your position when it is closed or not in use.
- We do not track you while you are marked available. Turning on "Go Available" tells us you are open to offers. It sends no coordinates. Shifts are matched to you by the service area on your profile, not by where you are at the time.
- We do not collect location continuously during a shift. There is no reading between your check-in and your check-out.
- We do not sell location data, share it with advertisers, or use it for advertising. We run no advertising or analytics services of any kind.
You can refuse or revoke location access in your device settings at any time. The app will continue to work, but check-in and check-out cannot be completed without it, because there would be nothing to verify attendance against.
Facilities: when you post a shift, the address you type is sent to Google's geocoding service to convert it into map coordinates for the shift. That is address data you have entered, not your device's location.
10. Push Notifications
We use push notifications to alert you about new shift opportunities, shift updates, and important account information. You can disable push notifications in your device settings at any time.
11. Children's Privacy
MedProH is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
12. HIPAA Notice
MedProH is a staffing platform and does not directly access or store patient health information (PHI). However, as a business associate of covered entities (healthcare facilities), we maintain appropriate safeguards in accordance with HIPAA requirements. Our Business Associate Agreement (BAA) is available upon request for facility partners.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights: