SmartXperiences provides marketing, call tracking, call measurement and revenue attribution services. When we work with a healthcare practice, those services can involve protected health information — most often in a recorded call, a call transcript, or a form submission from a prospective patient.
We sign a Business Associate Agreement. If you are a covered entity under HIPAA, we execute a BAA before any call is recorded or any patient data reaches our systems. Our agreement follows the model provisions published by the U.S. Department of Health and Human Services. Email Hello@SmartXperiences.com and we will send it for your review.
What we do with protected health information. We do not transmit call recordings, call transcripts, or information provided by a caller to any advertising or analytics platform. What goes to those platforms is conversion data only, in fields your practice approves in writing before anything is activated, and reviewed again any time the integration materially changes.
Subcontractors. Any subcontractor that may handle PHI on our behalf is named in your agreement and is bound by a written agreement meeting the same requirements.
A note on certification. HIPAA has no certifying body. HHS does not certify, endorse, or approve vendors, and any “HIPAA certified” seal is issued by a private company with no regulatory authority. We don’t display one. What we offer instead is a signed agreement and a documented configuration — both of which you can review before you commit.
Questions: Hello@SmartXperiences.com · 1 (209) 86-SMART