Privacy policy

CoverageOnCall (operated by CoverageOnCall LLC) runs a marketplace that connects clinics with licensed healthcare providers for temporary coverage shifts. This policy explains what personal information we collect on coverageoncall.com, our apps and our messages, how we use and share it, and your choices.

CoverageOnCall never collects or stores patient information (protected health information). Clinics and providers agree not to enter it, and our forms and messages block it.

• Account details: name, email, phone number, password (stored only as a secure hash), and the role you sign up as.
• Provider profile and credentials: professional details, home base (address, used to work out distance and drive time), licenses, malpractice policy details and documents, NPI, skills, availability, a photo and an optional bio.
• Clinic details: clinic and location names and addresses, team members, and the shifts you post.
• Bookings and work records: applications, offers, bookings, time-clock punches, visit counts (numbers only), timesheet sign-offs, ratings, private feedback and messages sent through the platform.
• Location during a shift, only if you choose to share it: when a provider taps "On my way" or clocks in, the phone's position is used once to estimate arrival time or distance from the clinic. Only the result (an arrival time, a distance) is kept; the position itself is not stored. Sharing stops when the page is closed.
• Payments: card or bank details are entered on Stripe's pages and held by Stripe, not by us. We keep payment amounts, statuses and Stripe reference numbers.
• Tax information: providers give their legal name, address and Social Security number or EIN (the details on a W-9) to Stripe during payout setup. We never see or store the number; we only receive from Stripe whether the tax information is complete.
• Sign in with Google (optional): your Google account's ID, name and email address. We never receive your Google password.
• Devices and usage: IP address, browser and device type, pages visited and actions taken, used for security (fraud and spam checks, sign-in protection) and to improve the service. Push-notification subscriptions if you turn on app alerts.
• Information from public sources: for clinic and provider outreach, we use public business information such as the national NPI registry, practice websites and public business email addresses.

• To run the marketplace: verify credentials, match providers to shifts they're licensed and insured for, book and confirm shifts, process payments and payouts, and keep work records.
• To communicate: account, booking, reminder and safety messages by email, text, push notification and in-app notification, and replies to your questions.
• Marketing: emails about our service to clinics and providers, always with an unsubscribe link. Marketing texts are sent only with your consent.
• Safety and compliance: preventing fraud, spam and off-platform dealing, checking licenses against state records, and meeting tax and legal duties.
• Improving the service, including with AI tools that help write and sort messages and summarize information. AI never decides credential eligibility or prices, and patient information is never sent to it.

If you give us your mobile number and opt in, CoverageOnCall sends texts such as verification codes, shift offers you can answer by reply, booking confirmations and changes, reminders and arrival updates. Message frequency varies. Message and data rates may apply.

Reply STOP to any text to stop texts, START to turn them back on, and HELP for help. Opting in to texts is not required to use the service.

We do not sell, rent or share your mobile number or text-messaging opt-in with third parties or affiliates for their marketing purposes. Mobile numbers are shared only with the service providers that deliver our texts (such as Twilio), and only to send them.

• Between clinics and providers, as needed for a booking: clinics see a provider's professional profile, verified credentials (never license numbers or home address), ratings and reliability; booked providers see the clinic's address, arrival notes and on-site contact.
• Service providers who work for us under contract: hosting and database (Namecheap, Neon), payments and tax forms (Stripe), email (SendGrid), texting (Twilio), maps and sign-in (Google), spam protection (Cloudflare), analytics on public pages (Google Analytics), and AI providers (such as OpenAI, Anthropic or Google) for the tasks described above.
• When required by law, to protect people's safety, or to enforce our agreements, and to a buyer if the business is sold (under this policy).

We do not sell personal information.

We use cookies to keep you signed in, remember sign-up and referral links, and protect forms from spam. Google Analytics runs on our public pages only (never inside accounts), without tracking codes from our emails.

We keep account and booking records while your account is open and as long as needed afterwards for payments, taxes, disputes and legal duties (generally up to 7 years for financial records). Spam submissions are deleted after a short period. Backups are encrypted and kept for a limited time.

You can update your profile and notification settings in your account, unsubscribe from marketing emails with the link in any email, and stop texts by replying STOP. To request a copy of your information, a correction or deletion of your account, email privacy@coverageoncall.com. When an account has work history, we erase personal details and keep the records the law requires.

We use encryption in transit, hashed passwords, optional two-step sign-in, sign-in attempt limits, encrypted backups and access limited to people who need it. No system is perfectly secure; tell us right away if you think your account has been misused.

The service is for professionals and businesses and is not meant for anyone under 18.

We'll post changes here and update the date above; for significant changes we'll also tell account holders. Questions: privacy@coverageoncall.com.