How we handle your data.
Plain answers to the questions practice owners ask before giving anyone access. HHS sample BAA provisions
Logins
You add us as users in your own tools, or share access through a password manager like 1Password or Bitwarden. We never ask for passwords by email or chat, and two-factor sign-in is on for every account we use.
Least access
We ask for the lowest permission level that lets us do the work, and only in the tools we're working in.
Patient data stays in your systems
We work inside your booking, CRM and messaging tools. We don't export patient or customer lists to our own computers, spreadsheets or personal devices.
BAA before we start
Clinics and practices get a signed Business Associate Agreement before we touch anything. We sign yours, or start from the sample provisions the US Department of Health and Human Services publishes, reviewed by your counsel.
No ad pixels on patient pages
We keep health information out of marketing tools and ad pixels, and check intake and booking pages against HIPAA and state health-data laws before anything goes live.
Texting with consent
Marketing and win-back texts only go to patients who agreed to receive them, with a clear way to opt out. We don't cold-text anyone.
No medical advice
Our replies answer booking and general questions only. Anything clinical goes straight to your licensed team.
Where we work
Jerome and Effie work from the Philippines, live every US weekday afternoon. Your work is never handed to anyone else.
When we part ways
Within 24 hours of cancelling we hand over documentation and you remove our access. Everything we built keeps running in your accounts.
Have a question this page doesn't answer? Email [email protected] and we'll answer in writing, so your counsel can review it.
See what we'd fix first.
Send your website. Within two business days Jerome or Effie sends you a 60-second screen recording of the three leaks we'd fix first. Free, and you won't be added to any list.
We take on 2 new clients a month.
Your free teardown
A 60-second video of your site, recorded by a founder.