Provider Matching — Privacy Notice

Staging draft — counsel review required before production.

*Not reviewed by an attorney. This describes what the product actually does

today. Where something is planned but not built, it says so rather than

describing it as current.*

Who we are

Provider Matching operates a marketplace where healthcare organizations hire

clinicians directly.

**We are not a staffing agency, an employer, a co-employer, an employer of

record, a payroll provider, or a background-check company.** Employers make all

hiring, classification, credentialing and privileging decisions.

What we collect

If you are a clinician

• Account — the email address you sign in with, and your password, which is

held by our authentication provider and never by us in readable form.

• Profile — your name, phone number, provider type, city, state, ZIP code,

specialty, career stage and years of experience.

• Résumé — the file you upload, and the fact of which version was sent with

which application.

• Credentials — the state licences you tell us about, and documents you add

to your compliance wallet.

• Applications, messages and interviews — what you applied to, what was said

through the platform, and interview times.

• Licence and exclusion-source results — see below.
• Communication preferences — each choice, when you made it, and where from.

If you are an employer

• Account and organization — your email, your name and title, and your

organization's name, type, business email and location.

• Your direct-employer attestation, exactly as you accepted it.
• Jobs you post, and applications you receive.
• Messages and interviews through the platform.
• Offers you send, and engagements that result.

Automatically

• Authentication cookies, set by our authentication provider, so you stay

signed in. They are HTTP-only, so scripts cannot read them.

• Security and audit records — that an action happened, who did it, and

when.

We do not use advertising or analytics trackers, and we do not sell personal

information.

Your compliance wallet, and who sees it

Documents in your wallet are visible to an employer **only when you share

them**, either by applying to a job or by sharing directly.

• You choose what to share, and with whom.
• You can withdraw access, and withdrawing an application does so immediately.
• You can see who has looked at what.

Licence and exclusion-source results

We check individual state licence registers and federal exclusion lists for

clinicians who tell us where they are licensed.

• We record what a specific source reported, on the date it reported it.
• We do not combine results into a single "verified" status, because the

sources answer different questions.

• A name-based source can report a possible match on a different person with the

same name. A person reviews such a result; the source never concludes anything

on its own.

• This is not a background check, and it is not a determination that anyone

is cleared, credentialed or fit to practise.

SAM.gov exclusions are not currently being searched. We are waiting on our

own access to that source, and we claim nothing about it in the meantime.

Medical, drug-screen and occupational-health integrations are not active. We

do not receive results from any such vendor today. Where a document of that kind

is in your wallet, it is because you uploaded it.

Offers and engagements

When an employer sends you an offer we record its exact terms, and if you accept,

what you accepted and when. We keep that record; it is evidence of an agreement

between you and the employer.

No money moves through Provider Matching. We do not process payments, issue

invoices, run payroll, or hold bank or card details.

Cookies

We use cookies for one thing: keeping you signed in. There are no advertising,

analytics or tracking cookies, and there is nothing to opt into.

Service providers

• Supabase — database, authentication and file storage.
• Netlify — hosting.

They process information to provide those services to us. **No email, SMS,

telephony, AI or background-check vendor is connected to this product.**

Where information is processed

Our providers operate in the United States. If that changes materially, this

notice will be updated and, where a change is material, we will ask you to

acknowledge it.

How long we keep things

Retention is set by category, because the categories carry genuinely different

obligations:

[COUNSEL DECISION 18] The specific periods are not set. We describe the

approach rather than inventing durations.

Your choices about messages

Account, security and service messages come with having an account.

Job alerts and marketing are optional, each channel separately — email, text

message, and automated calls are three different choices, none is on by default,

and any can be withdrawn without affecting your use of the marketplace.

We do not currently send marketing email, text messages or automated calls at

all.

Access, correction and deletion

You can see and change your profile and wallet in your account at any time.

You may ask us for a copy of what we hold, to correct it, to delete it, or to

restrict how we use it. Requests are recorded and tracked.

We will tell you honestly what we can and cannot do. Some records cannot be

deleted on request: an application involves an employer's records as well as

yours, and audit records are evidence of decisions already taken. Where that is

the case we will say so rather than quietly doing nothing.

Deletion is not automatic and is not instant. A request is handled by a

person.

Do Not Sell or Share

**We do not sell personal information, and we do not share it for

cross-context behavioural advertising.** There is no advertising on this

platform and no advertising vendor connected to it.

[COUNSEL DECISION 16, 17] Whether a formal "Do Not Sell or Share My Personal

Information" control is required is a legal question that has not been answered.

We have deliberately not added a link that does nothing, because a control

that appears to do something and does not is worse than none.

Legal and safety disclosures

We may disclose information where the law requires it, or where it is necessary

to protect someone's safety or to investigate a serious breach of our terms. We

will tell you unless we are prohibited from doing so.

Children

The marketplace is for working clinicians and is not directed at anyone under 18.

Changes to this notice

We publish a new version. A material change requires renewed acknowledgment

before your next consequential action. What you acknowledged, and when, is

recorded against the exact version you saw.

What is true about this environment

This is a staging environment holding synthetic test data. It is not

indexed by search engines. No real clinician or employer information should be

entered into it.

What we do not claim

• We do not claim that a stated number of clinicians or résumés are inside this

platform. Any such figure elsewhere describes reach in the market, not records

held here.

• We do not describe planned capabilities — employer imports, automated

outreach, résumé parsing, matching — as current processing. None of them

exists.

Contact

Privacy requests and questions: through the contact route published on the site.