Privacy Policy

1. Introduction

At Vita Health RCM, we are dedicated to maintaining the absolute trust, confidentiality, and data sovereignty of our healthcare clients and visitors. This Privacy Policy details how we collect, process, and protect your personal information and Protected Health Information (PHI) in full accordance with federal, state, and international data protection laws.

2. Information We Collect

We process different categories of information based on your interactions with our platforms:

Personally Identifiable Information (PII): Name, business email, practice phone number, clinical title, and organization name submitted via contact, career, or audit request forms.
Technical Diagnostics: IP address, device fingerprints, browser specifications, and navigation timestamps collected via analytics cookies for performance enhancement.
Provider Account Data: National Provider Identifier (NPI), Tax Identification Numbers (TIN), clearinghouse identifiers, and billing credentials shared pursuant to executed Service Level Agreements.

3. HIPAA & Protected Health Information (PHI)

                HIPAA Business Associate Mandate: As an RCM service partner processing Protected Health Information (PHI), Vita Health RCM operates strictly as a "Business Associate" under HIPAA regulations (45 CFR § 164.502). We execute a formal Business Associate Agreement (BAA) with all covered entities prior to data ingestion.
            

We enforce a strict Zero-PHI Web Footprint policy. No patient medical records, encounter documentation, or claim files are stored on or accessible through this public-facing web server. All transmission of PHI occurs solely across dedicated, encrypted point-to-point VPN tunnels or encrypted SFTP servers directly into client Practice Management Software.

4. How We Use Your Data

We utilize collected information solely for legitimate healthcare administrative and operational purposes:

To deliver requested revenue cycle services including medical coding, claims submission, payment posting, and denial arbitration.
To communicate practice audit findings, monthly collection performance metrics, and policy changes.
To continuously monitor and enhance website performance, security, and accessibility.

We never sell, lease, monetize, or commercialize client, provider, or patient data to any third party under any circumstances.

5. Technical Security Measures

Vita Health RCM maintains an enterprise-grade defense-in-depth security infrastructure:

Data Encryption: All transit communication enforces 256-bit TLS encryption protocols. Data at rest is encrypted using AES-256 standards.
Role-Based Access Control (RBAC): Access to billing platforms is provisioned strictly on a least-privilege basis with mandatory Multi-Factor Authentication (MFA).
Physical Security Safeguards: Our global delivery centers operate under continuous 24/7 CCTV monitoring, biometric badge control, and paperless clean-desk restrictions.

6. Cookies & Tracking

We use essential and analytics cookies to optimize site performance and analyze aggregate user journeys. Users can adjust cookie preferences through their browser settings at any time, though disabling cookies may impact certain interactive tools like our ROI Calculator.

7. Contact Our Data Privacy Officer

For questions concerning this Privacy Policy, Business Associate Agreements, or data privacy rights, please direct inquiries to:

Compliance & Legal Department – Vita Health RCM
30 N Gould St, Ste R, Sheriden, WY 82801
Email: Solutions@vitahealthrcm.com
Phone: +1 (240) 256-6786