Privacy Policy

Last updated: April 8, 2026

1. Introduction

This Privacy Policy describes how Ava Health ("we," "us," or "our") collects, uses, and shares information in connection with the Ava Health Provider Directory ("Directory") available at providers.avahealth.co.

2. Information We Display

The Directory displays publicly available healthcare provider information sourced from the National Plan and Provider Enumeration System (NPPES), maintained by the Centers for Medicare & Medicaid Services (CMS), a federal government agency. This data includes:

  • Provider names and credentials
  • National Provider Identifier (NPI) numbers
  • Practice specialties
  • General practice location (city and state)
  • Provider type classification

This information is part of the public record and is freely available from CMS. We do not display personal contact information such as phone numbers, email addresses, home addresses, or Social Security Numbers.

3. Information We Collect From Visitors

When you visit the Directory, we may automatically collect limited technical information, including:

  • IP address and approximate geographic location
  • Browser type and version
  • Pages visited and time spent on pages
  • Referring website or search terms

We do not require user registration, collect personal information through forms, or use cookies for tracking or advertising purposes. We may use essential cookies necessary for site functionality.

4. How We Use Information

We use automatically collected technical information solely to:

  • Maintain and improve the Directory
  • Monitor site performance and uptime
  • Analyze aggregate usage trends
  • Protect against abuse and unauthorized access

5. Data Sharing

We do not sell, rent, or trade visitor information to third parties. We may share technical data with service providers who assist in operating the Directory (such as hosting and analytics providers), subject to confidentiality obligations.

6. Third-Party Services

The Directory is hosted on Vercel and uses Supabase for data services. These providers may collect technical information as described in their respective privacy policies. We encourage you to review their policies.

7. Data Retention

Provider information displayed in the Directory is updated regularly from the NPPES database. Technical visitor data is retained only as long as necessary for the purposes described above.

8. Your Rights

If you are a healthcare provider listed in the Directory and wish to request corrections to your listing, please note that our data is sourced from the NPPES registry. To update your information, you should update your NPI record directly with CMS at nppes.cms.hhs.gov. Changes will be reflected in our Directory upon our next data update.

If you have concerns about your listing, you may contact us at alex@avahealth.co.

9. Children's Privacy

The Directory is not directed at children under the age of 13 and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Directory after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at alex@avahealth.co.