Legal
Privacy Policy
Last updated: July 25, 2026
MedProH is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our healthcare staffing platform.
1. Who We Are
MedProH ("we", "us", or "our") is a healthcare staffing platform that connects medical professionals with healthcare facilities. Our platform is operated by MedProH Inc. and is accessible via our mobile applications and website at medproh.app.
For privacy-related inquiries, contact us at: privacy@medproh.app
2. Information We Collect
2.1 Information You Provide
For Healthcare Professionals:
- Full name, email address, and password
- Phone number and date of birth
- Home address (street, city, state, ZIP)
- Professional license type, number, and issuing state
- Years of experience
- Bank account information for direct deposit (collected and processed directly by Stripe, our payment processor — MedProH never sees or stores your bank details)
For Healthcare Facilities:
- Facility name, type, and NPI number
- Facility address and contact information
- Contact person name and title
- Payment method (processed by Stripe)
2.2 Information Collected Automatically
- Device information (device type, operating system, device ID)
- Location data (GPS coordinates when you go "available" for shifts)
- Push notification tokens (APNs for iOS, FCM for Android)
- App usage data and shift activity logs
- IP address and connection information
2.3 Information from Third Parties
- License verification data from state nursing boards
- Payment processing information from Stripe
3. How We Use Your Information
- To match healthcare professionals with available shifts based on location and qualifications
- To process payments and issue tax documents (1099-NEC)
- To verify professional licenses with state licensing boards
- To send push notifications about shift opportunities and updates
- To communicate important account and service information
- To send password reset emails and transactional notifications
- To prevent fraud and ensure platform safety
- To comply with legal obligations
- To improve our services and user experience
4. Sensitive Information
Social Security Numbers: MedProH never collects or stores your Social Security Number. Tax identity information (including SSN, where required) is collected directly by Stripe, our payment processor, on Stripe's own secure pages for identity verification and IRS 1099 tax reporting. It is governed by Stripe's Privacy Policy, and MedProH has no access to it.
We treat the following as sensitive information requiring heightened protection:
- Financial account information
- Professional license information
- Location data
5. How We Share Your Information
5.1 With Healthcare Facilities
When you accept a shift, the facility receives your full name, license type, and contact information necessary to coordinate your assignment.
5.2 With Service Providers
- Amazon Web Services (AWS) — Cloud infrastructure and data storage
- Stripe — Payment processing and Stripe Connect for professional payouts
- Google — Address autocomplete (Google Places API) and Firebase push notifications
- Apple — Push notifications via APNs
5.3 Legal Requirements
We may disclose your information when required by law, court order, or government authority, or when necessary to protect the rights, property, or safety of MedProH, our users, or others.
5.4 We Do Not Sell Your Data
MedProH does not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Data Security
We implement industry-standard security measures to protect your information:
- All data transmitted is encrypted using TLS 1.3
- Sensitive data is encrypted at rest
- Access to production systems is restricted and audited
- Regular security reviews and vulnerability assessments
- AWS infrastructure with SOC 2 compliance
7. Data Retention
- Active account data is retained for the duration of your account
- Shift and payment records are retained for 7 years for tax and legal compliance
- Upon account deletion, personal data is anonymized within 30 days, except where retention is legally required
8. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and personal data
- Portability: Receive your data in a machine-readable format
- Opt-out: Opt out of non-essential communications
To exercise these rights, contact us at privacy@medproh.app
9. Location Data
When you activate "Go Available" mode, we collect your GPS location to match you with nearby shifts. Location data is only collected when you are actively available and is not tracked when the app is closed or you are offline. You can disable location access in your device settings, though this will prevent shift matching.
10. Push Notifications
We use push notifications to alert you about new shift opportunities, shift updates, and important account information. You can disable push notifications in your device settings at any time.
11. Children's Privacy
MedProH is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
12. HIPAA Notice
MedProH is a staffing platform and does not directly access or store patient health information (PHI). However, as a business associate of covered entities (healthcare facilities), we maintain appropriate safeguards in accordance with HIPAA requirements. Our Business Associate Agreement (BAA) is available upon request for facility partners.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights: