Privacy Policy

Effective date: October 19, 2026.

1. What this policy covers

This policy explains how Empathiatry Nursing P.C., doing business as Empathiatry, collects, uses and shares information through our website, waitlist, referral form, patient account and messages. Health information we hold as your healthcare provider is also protected by federal law. How we use and share it is described in our Notice of Privacy Practices, which controls where the two differ.

2. Information we collect

Information you give us: name, date of birth, email, phone, city and state, insurance or self-pay choice, the reason you are seeking care, and anything you write in a form or message.
Information a referring professional gives us when they refer you, with your agreement.
Account information: sign-in details, appointment history, consents and preferences.
Payment information, handled by our payment processor. We do not store your full card number.
Technical information from our website: device and browser type, pages visited, and approximate location from your network address.

3. How we use information

To answer your request, manage the waitlist and referrals, and contact you about them.
To provide, schedule and coordinate your care.
To verify insurance, bill, and collect payment.
To send messages you agreed to, and the transactional messages your care requires.
To keep our services safe, prevent fraud and misuse, and meet legal duties.
To improve our services, using information that does not identify you wherever possible.

We do not sell your personal information. We do not use your health information for advertising.

4. How we share information

We share information only as needed:

With service providers that work for us under contract, including Parrot Assist, which runs our waitlist, patient portal and records as our business associate. Providers that handle health information sign a business associate agreement.
With your insurer, pharmacy, laboratory or other clinicians when needed for your care or payment.
With people you authorize.
When the law requires it, or to prevent a serious threat to health or safety.
With a successor if our practice is merged or sold, under the same protections.

5. Text messages and mobile information

If you give us a mobile number and agree, we send transactional text messages about your waitlist request, care, scheduling and account. Promotional text messages about news, education and services are a separate choice and are never required. Reply STOP to stop texts and HELP for help. Message and data rates may apply. Sign-in codes are never sent by text. Texts do not contain your diagnosis or treatment details.

We do not share or sell mobile phone numbers or text-message consent with third parties or affiliates for their marketing or promotional purposes.

6. Email

We send email about your waitlist request, care and account from our transactional mail. Optional news comes from our news mail, and you can unsubscribe at any time. Our emails do not contain your diagnosis or treatment details.

7. Cookies and analytics

We use cookies that our website needs to work and to keep you signed in. Optional analytics run only if you allow them in our privacy choices. We do not place advertising or tracking technology on our waitlist, referral, patient account or booking pages, and we do not send health information to analytics or advertising companies.

8. Security

We use administrative, physical and technical safeguards. These include encryption in transit and at rest, access limited by role, and audit records of access. No system is perfectly secure, and we cannot promise that information will never be accessed without permission. If a breach affects you, we will notify you as the law requires.

9. Retention

We keep adult medical records for at least 10 years after your last visit, or longer if the law of your state or a legal hold requires it. Waitlist and referral information that does not become a patient record is deleted when it is no longer needed for the request, unless the law requires us to keep it.

Face data. When you verify your identity, we create a face measurement from a short video of your face to compare it with the photo on your ID. We delete the face video, the face photo taken from it and the face measurement as soon as the check finishes, and no later than 24 hours after you started if the check is interrupted. We never sell, lease, trade or profit from face data. Photos of your ID are kept as part of your medical record.

10. Your choices and rights

You can update your information in your account, change your message choices, or ask us to stop non-essential messages. Depending on your state, you may also have rights to know, access, correct or delete personal information that is not part of your medical record. Your rights over your medical record are described in our Notice of Privacy Practices. We will not treat you differently for using these rights. To make a request, contact us below. We will verify your identity before acting.

11. State health data notices

Some states, including Washington, give extra rights over consumer health data. Our state-specific notices on our Legal page explain those rights and how to use them.

12. Children

We provide care only to adults 18 and older. We do not knowingly collect information from children. If we learn that we have, we will delete it unless the law requires us to keep it.

13. AI-assisted tools

We use artificial intelligence tools to help our clinicians, for example to draft visit notes and to show live captions during a visit. These tools are run by providers that have signed a business associate agreement with us and are not allowed to keep your information or use it to train their models. Your clinician reviews and approves anything AI helps draft before it becomes part of your record. AI-assisted documentation is part of how our practice provides care and is used for all visits. New patients are told before they book and agree before the first visit. If you do not agree, we help you find other care. Our AI-Assisted Documentation policy explains more.

14. Telehealth visits and recordings

Visits take place over an encrypted video service run for us under a business associate agreement. We do not record visits unless you agree in a separate consent. You can refuse or take back that consent at any time.

15. Where information is kept

We store and process your information in the United States. If you use our services from outside the United States, your information is transferred to and handled in the United States.

16. Browser privacy signals

If your browser sends a Global Privacy Control signal, we treat it as a request to turn off optional analytics for that browser.

17. Changes

We will post any update here with its effective date. If a change is material, we will tell you in your account or by email before it takes effect.

18. Contact

Privacy Officer, Empathiatry Nursing P.C., 9984 Scripps Ranch Blvd Unit# 830
San Diego, CA 92131 . Email admin@empathiatry.com. Phone (855) 511-1692.