NPI Provider Check Privacy Notes

NPI Provider Check does not require an account in the current release and does not sell personal data.

Data Collected

Provider names or 10-digit NPI numbers, optional two-letter state filters, selected manual credentialing checklist items, local lookup workflow state, and locally saved review packets.

Use Of Data

NPPES NPI Registry identity lookup, source confidence labeling, and registry context plus manual credentialing checklist display.

Only the search terms leave the device: the provider name or 10-digit NPI plus the optional state filter may be sent to the configured backend and to the NPPES NPI Registry to answer the request. Checklist selections, workflow state, and saved review packets stay on the device. Durable cloud saves, accounts, and sync are not part of this release unless the product-specific notes above explicitly say otherwise.

Retention And Deletion

Search requests are used to return NPPES registry identity context and manual credentialing checklist prompts. The current provider search, state filter, active tab, checklist selections, and saved review packets are stored locally on device for continuity. No account or cloud sync is configured in this release. If accounts or cloud sync are added later, this policy must be updated with account deletion instructions before release.

Sharing, Sale, And Tracking

This release does not sell data, does not include third-party advertising, and does not include cross-app tracking. If analytics, crash reporting, purchases, accounts, or cloud storage are added later, update this policy and store privacy labels before submission.

Security

Network requests should be made over HTTPS to the deployed backend and the NPPES NPI Registry. Do not put secret API keys in Expo public environment variables.

Public-data caveat: government registry datasets can be incomplete, delayed, or revised, and license data inside NPPES taxonomies is self-reported. NPPES results are registry identity context - not a credential, licensure, exclusion, or enrollment verification - so the app should be treated as a source-linked screening tool, not a guarantee or professional determination.