Healthcare Privacy Policy

1. Information We Collect

ASHADON HEALTHCARE SYSTEMS (operating the MedCare platform) collects information necessary to execute provider credentialing and compliance verifications:

• Provider Identity: Full legal name, date of birth, National Provider Identifier (NPI), medical school, residency, and board certifications.
• State Licenses & DEA Numbers: License numbers, issuing boards, states, effective dates, and expiration intervals.
• Uploaded Documents: Digital copies of state medical licenses, DEA certificates, malpractice certificates, and curriculum vitae (CVs).
• Technical Audit Logs: Access timestamps, IP addresses, and user actions recorded in compliance with HIPAA § 164.312(b).

2. How We Use Provider Information

Information collected is strictly utilized to:

• Execute primary source verification against CMS NPPES and state board repositories.
• Conduct automated monthly screenings against the HHS-OIG List of Excluded Individuals and Entities (LEIE).
• Generate pre-filled 12-field state renewal packets under authorized human review.
• Dispatch proactive multi-channel watchdog alerts (120, 90, 60, and 30 days) prior to license expirations.

MedCare never sells, rents, or commercializes provider credential data.

3. Cryptographic Storage & Encryption Standards

Sensitive credentials and provider records are encrypted at rest using AES-256 standards with key material maintained outside the database. Communication channels enforce TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS) headers.