Privacy Policy

What this policy covers

This policy describes how practitionermap.com collects, uses, and handles information relating to this website and its users. practitionermap.com is a practitioner directory — it is not a healthcare provider and does not collect protected health information (PHI). HIPAA does not apply.

Information we collect

Practitioner directory data — We compile practitioner and clinic information from publicly available sources including Google Business Profile, the Oregon Board of Chiropractic Examiners (OBCE) license database, the Washington State Department of Health credential lookup, and the federal NPI Registry. This data is public record. Practitioners listed in the directory have not necessarily consented to being listed; listing a licensed practitioner in a public directory is a legitimate informational use of public records.

Account data (claimed listings) — If you claim your listing, we collect your name, email address, license number, and any profile information you provide. This data is used solely to verify your identity and maintain your listing.

Email subscriptions — If you subscribe to updates, we collect your email address and record a consent timestamp and IP address. You can unsubscribe at any time via the link in any email we send.

Analytics — We use PostHog configured in cookieless mode. No cookies are set. No personal data is transmitted to PostHog. No cookie consent banner is required or shown.

Server logs — Our hosting provider (Vercel) retains standard server logs including IP addresses and request details. These are used for security and performance monitoring and are not used for advertising.

How we use information

• Display accurate practitioner directory information to site visitors
• Verify license status against state board records for the verified badge
• Send account and listing notifications to practitioners who have claimed their listing
• Send email updates to subscribers (opt-in only; unsubscribe any time)
• Monitor and improve site performance and security

We do not use personal information for advertising, do not sell individual data to third parties, and do not share data with third parties except as described below.

Third-party services

• Vercel — hosting and edge delivery. Vercel processes server logs containing IP addresses.
• Supabase — database. Practitioner and subscriber records are stored in a Supabase-hosted PostgreSQL database.
• PostHog — cookieless product analytics. No personal data is shared with PostHog.
• Resend — transactional email. Email addresses are transmitted to Resend only for the purpose of delivering emails you have opted in to receive.

Your rights

Correction and removal requests — Any practitioner listed in the directory may request a correction or removal of their listing by contacting us at the address below. We respond within five business days and process confirmed removal requests within thirty days.

California residents (CCPA/CPRA) — You have the right to know what personal information we hold about you, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of your personal information. We do not sell or share personal data as defined under CCPA. To exercise any right, contact us at the address below.

Email subscribers — You may unsubscribe at any time using the link in any email, or by contacting us directly. Unsubscribed records are soft-deleted and purged within thirty days.

Data retention

We apply a soft-delete pattern to all user-facing records. Deleted records are marked with a deletion timestamp and reason, retained for thirty days, then permanently purged. Claimed listing data is retained for the duration of the account relationship plus thirty days after account closure.

Changes to this policy

We may update this policy as the service evolves. Material changes will be noted with an updated date at the top of this page. Continued use of the site after a policy update constitutes acceptance of the revised terms.