Privacy Policy
How Care Nomads collects, uses, encrypts, and protects your personal and healthcare information across the United States and Canada.
Privacy Overview & Key Takeaways
At Care Nomads, your privacy and health data security are paramount. We collect only the information required to safely connect clients with background-checked caregivers, facilitate shift check-ins, and manage equipment rentals.
Care Nomads ("Company," "we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with United States federal (HIPAA) and state privacy regulations, as well as Canadian federal (PIPEDA) and provincial health privacy laws (PHIPA).
Scope & Applicability
This Privacy Policy applies to all individuals who interact with our digital platform, mobile applications, and services, including:
- Visitors to our website & mobile app
- Families booking care services
- Caregivers & nurses registering with us
- Healthcare facilities & staffing clients
- Equipment renters & delivery specialists
Information We Collect
Depending on your user role and interaction with Care Nomads, we collect the following categories of data:
Account & Identity Information
Full legal name, email address, mobile phone number, physical address, ZIP or Postal Code, date of birth, and emergency contact details.
Payment & Financial Data
Payment transactions are securely tokenized and processed by Stripe. Care Nomads does not store raw credit card numbers or banking secrets on our servers.
Shift Telemetry & Geofencing Data
GPS coordinates, timestamped location check-ins, and geofence boundary validations collected exclusively during active shift clock-in and clock-out periods.
Verification & Care Check-Ins™ Media
Micro-video activity verification snippets, photo updates, and daily routine shift notes uploaded through Care Nomads Check-Ins™.
Professional Credentials (Caregivers & Staff)
Professional license details (CNA, RN, LPN, PSW), background screening reports, CPR/First-Aid certifications, immunization records, and driver's license proof.
Protected Health Information (PHI)
Client care plans, medical conditions, allergy alerts, mobility assessments, and specialized care instructions required for shift fulfillment.
How We Use Your Information
We process your personal information strictly for legitimate operational purposes:
- Service Fulfillment: Matching families with vetted caregivers, processing bookings, and dispatching equipment rentals.
- Accountability & Safety: Verifying caregiver identity, conducting background audits, and validating shift check-in telemetry.
- Financial Transactions: Processing client payments, contractor payouts, and generating tax documents.
- Communication: Sending booking confirmations, shift notifications, safety alerts, and customer care support updates.
- Regulatory Compliance: Fulfilling statutory obligations under HIPAA, PHIPA, PIPEDA, and state/provincial employment regulations.
Legal Bases for Processing
We process data based on performance of a contract, compliance with legal healthcare mandates, explicit user consent, and legitimate interests in maintaining platform security.
We process data based on informed consent, contractual necessity under temporary help agency regulations, and health privacy provisions governed by PHIPA and PIPEDA.
How We Share Information
We share data only with authorized service partners required for operations:
- Payment Processors: Stripe, Inc. for tokenized financial transactions.
- Background Screening Agencies: Accredited vendors for criminal and license verification.
- Matched Caregivers & Clients: Necessary contact and care instructions shared between confirmed booking parties.
- Legal & Authorities: Compliance with subpoenas, court orders, or mandatory reporting requirements under law.
Data Retention
Personal and health data is retained only for as long as necessary to satisfy the purpose for which it was collected or to comply with statutory retention limits:
Account Data
Retained for active account duration + 7 years statutory limit
PHI Records
Retained per HIPAA & PHIPA health record guidelines
Telemetry Logs
Stored for 90 days operational verification window
Data Security Architecture
Care Nomads implements rigorous technical and organizational security controls to protect your data against unauthorized access, loss, or alteration:
Your Rights Under US Law (HIPAA & State Laws)
- Right of Access: Request a copy of your personal data and health records held by Care Nomads.
- Right of Rectification: Request correction of any inaccurate or incomplete personal data.
- California Resident Rights (CCPA/CPRA): Right to know categories of data collected and right to delete personal information.
Your Rights Under Canadian Law (PIPEDA & PHIPA)
- Right of Access & Portability: Obtain written confirmation of personal information stored under PIPEDA/PHIPA.
- Right to Withdraw Consent: Revoke consent for processing subject to active contractual obligations.
- Right to Regulatory Challenge: Escalate grievances to the Privacy Commissioner of Canada or Ontario IPC.
11. Children's Privacy
We do not knowingly collect personal information directly from children under 13 in the US or under 16 in Canada without parental consent.
12. International Data Transfers
Cross-border data transfers between the US and Canada are protected under strict encryption and contractual safeguards.
13. Changes to This Policy
Updates are published to this page with an updated "Last Modified" date. Material changes will be communicated via email or platform notification.
14. Regulatory Complaint Process
US users may submit HIPAA inquiries to HHS Office for Civil Rights. Canadian users may contact the Privacy Commissioner of Canada or Ontario IPC.
Have Privacy Questions?
Our Data Privacy Officer is here to assist with data access requests, compliance questions, or account security.