Privacy Policy
BIP Provider App - Healthcare Credentialing
Last updated: February 9, 2026
Overview
BIP Provider App is a healthcare credentialing application designed to streamline provider onboarding and credential management. We take your privacy seriously and are committed to protecting your personal information.
Key Privacy Commitments:
- No advertising or user tracking
- No third-party analytics
- All data collection is for core app functionality only
- HIPAA-compliant data handling
Data We Collect
We collect only the data necessary to provide healthcare credentialing services. All data is linked to your user account and is never used for tracking.
| Category | Data Types |
|---|---|
| Contact Info | Name, Email, Phone, Physical Address, Other Contact Info |
| Health & Fitness | Health records (immunization records for credentialing) |
| Financial Info | Liability insurance information |
| Location | Coarse location (facility addresses only - no GPS tracking) |
| Sensitive Info | SSN (for credentialing verification purposes only) |
| User Content | Photos/Videos, Customer Support communications, Other Content |
| Identifiers | User ID, Device ID |
| Usage Data | Product Interaction, HIPAA audit logs |
| Diagnostics | Crash Data, Other Diagnostic Data |
SMS & Text Messaging
BIP may send you SMS or text messages related to your account, including verification codes, credential renewal reminders, action-required notifications, and other service-related alerts.
SMS Data Commitments:
- Your phone number and messaging data will not be shared with third parties
- Your phone number and messaging data will not be used for marketing or promotional purposes
- SMS data is used solely to deliver account-related notifications and service alerts
- You may opt out of SMS messages at any time by replying STOP
Browser Extension (bipSubmit)
bipSubmit is our Chrome browser extension. It has a single purpose: to help you complete and track provider credentialing applications on payer and hospital portals by prefilling those forms with data from your Bip profile. The extension is available only to signed-in Bip users and does not create a separate account.
To do this, the extension accesses:
| What it accesses | Why |
|---|---|
| The active portal page (active tab) | Read and fill the credentialing form fields on the portal you are working in |
| Your Bip provider profile | Provide the name, credentials, and other data used to populate those forms |
| Local browser storage | Keep your signed-in session and remember submission status between pages |
| Page-navigation events | Detect when you land on a supported credentialing portal so the panel can offer to help |
The extension requests broad site access so it can recognize the many different payer and hospital portals used in credentialing. It only reads or fills form data on a page when you actively use bipSubmit to prefill, submit, or track a credentialing application on that page. Form contents you choose to submit are sent to Bip's servers and the third-party services listed above to perform autofill and record the submission.
Extension data commitments:
- We do not collect, store, or transmit your browsing or search history
- We do not collect content from pages unrelated to a credentialing submission you initiate
- We do not use extension data for advertising, tracking, or resale
- The extension uses no third-party analytics or advertising SDKs
How We Use Your Data
Purpose
App Functionality only
Linked to User
Yes (required for credentialing)
Used for Tracking
No
Sold to Third Parties
Never
Third-Party Services
We use the following trusted services to provide our credentialing platform:
| Service | Purpose |
|---|---|
| Supabase | Database & authentication |
| Third-Party Verification Services | Credential verification |
| CAQH | Healthcare credentialing exchange |
| Slack | Bug report handling |
| Expo | Push notifications |
Data We Do NOT Collect
Tracking Declaration
"Does your app track users?" No
We do not combine user data with third-party data for advertising, share data with data brokers, or use advertising SDKs.
Data Security
We implement industry-standard security measures to protect your data:
- End-to-end encryption for data in transit
- Encrypted storage for data at rest
- HIPAA-compliant infrastructure and processes
- Regular security audits and updates
- Role-based access controls
- Comprehensive audit logging
Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent at any time
Contact Us
If you have questions about this privacy policy or your personal data, please contact us:
Email: privacy@biphealth.app
Website: www.biphealth.app
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.