Privacy Policy

1. Introduction

Thile, LLC ("Thile," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and share information when you use our services, including our patient outreach and communication platform.

2. Information We Collect

We collect information provided by healthcare providers participating in our platform, including:

• Patient name and contact information (phone number)
• Referral and appointment details
• Communication preferences (SMS, voice call)
• Message history and delivery status

3. How We Use Your Information

We use the information we collect to:

• Send appointment reminders and scheduling notifications via SMS or voice call
• Follow up on healthcare referrals on behalf of participating clinics
• Facilitate two-way communication between patients and clinics
• Improve our services and communication effectiveness

4. SMS/Text Messaging

By providing your phone number to a participating healthcare provider, you consent to receive text messages from Thile on behalf of that provider. These messages may include appointment reminders, referral follow-ups, and scheduling confirmations.

• Message frequency varies based on your care needs
• Message and data rates may apply
• Text STOP to any message to opt out of SMS communications
• Text HELP for assistance

Opting out of SMS will not affect your healthcare services. You may still be contacted by phone or through your healthcare provider directly.

5. Information Sharing

We do not sell your personal information. We share information only with:

• The healthcare provider(s) involved in your care
• Service providers who assist in delivering our platform (e.g., telecommunications providers), subject to confidentiality agreements
• As required by law or to protect our legal rights

6. HIPAA & Protected Health Information

Thile acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when handling Protected Health Information (PHI) on behalf of healthcare providers. We enter into Business Associate Agreements (BAAs) with all covered entity clients and maintain safeguards consistent with HIPAA requirements, including:

• Administrative, physical, and technical safeguards for PHI
• Breach notification procedures as required by the HIPAA Breach Notification Rule
• Limiting use and disclosure of PHI to the minimum necessary for our services
• Ensuring subcontractors who access PHI are bound by equivalent protections

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, audit logging, and regular security assessments.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data by contacting us.

9. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information. To exercise these rights, contact us at [email protected].

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Limit Use of Sensitive Personal Information: Health-related information is considered sensitive personal information under the CPRA. We only use this information as necessary to provide our services on behalf of your healthcare provider.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To submit a request, contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days. You may also designate an authorized agent to submit a request on your behalf.

Do Not Track: Our website does not currently respond to "Do Not Track" browser signals. However, we do not engage in cross-site tracking of our users.

11. Other State Privacy Rights

Residents of other states with consumer privacy laws (such as Virginia, Colorado, Connecticut, and others) may have similar rights. To exercise any of these rights, contact us at [email protected].

12. Cookies & Analytics

Our website may use cookies and similar technologies to improve your browsing experience and analyze site traffic. These may include:

• Essential cookies required for site functionality
• Analytics cookies to understand how visitors use our site

You can control cookie preferences through your browser settings. Disabling cookies may affect your experience on our website but will not impact the delivery of our communication services.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

14. Contact Us

If you have questions about this Privacy Policy, contact us at:

Thile, LLC
Email: [email protected]
Website: thiletech.com