Independent US Healthcare Provider Directory & Public Medical Database Patient Guides
T-MedInfo US Healthcare Directory

Privacy Policy

What we collect, why, how long we keep it, and the choices you have

Last updated: October 11, 2026

This Privacy Policy explains how T-MedInfo (“T-MedInfo”, “we”, “us”), the operator of t-medinfo.com (the “Site”), collects, uses, and shares information. It covers two groups of people: visitors and registered users of the Site, and healthcare providers whose public records appear in our directory (see Section 9). Questions: support@true-medinfo.com.

1. Information we collect

You can browse and search the Site without an account. We collect information in the following ways:

  • Account information. If you register, we collect your email address, a display name, and your password. We store only a salted hash of your password, never the password itself. When you are signed in, we set a session cookie (see Section 3).
  • Reviews and photos. If you post a review of a provider, we collect the rating, title, text, any photos you attach, the provider it concerns, and the date. Published reviews and your display name are visible to everyone. Please do not include your own or anyone else’s health details, contact information, or other private information in a review or photo.
  • Support tickets. If you open a ticket from your account, we collect the subject, category, and message, linked to your account.
  • Contact form. If you use the Contact Us form, we collect your name, email address, subject, and message.
  • Provider data update requests. If you use the Provider Data Update Request form, we collect the NPI, provider name, your email address, and the details of your request.
  • Email. If you email support@true-medinfo.com, we receive and store your email address, the subject, and the message. When we reply, we keep a log of the outgoing message (recipient, subject, text, date, and delivery status).
  • Security check (Cloudflare Turnstile). Our forms (sign-in, registration, password reset, contact, provider requests, and reviews) are protected by Cloudflare Turnstile. To tell people from bots, Turnstile processes technical signals from your browser and your IP address. We receive only a pass/fail result.
  • Technical and log data. Like most websites, our servers and our network provider (Cloudflare) automatically record technical data when you visit, such as IP address, browser and device type, the pages you request, the referring page, and the date and time.
  • Analytics and advertising data. Google Analytics and Google AdSense collect information about your device and how you use the Site through cookies and similar technologies, subject to your consent choices (see Section 3).

We do not ask for, and do not want, your medical history, diagnoses, insurance details, Social Security number, or payment information. We do not process payments on the Site. Search terms you type into the Site search are used to show results; we do not store them in user profiles.

2. How we use information

  • To run the Site: provide search and directory pages, keep you signed in, and let you manage your account, reviews, and tickets.
  • To publish and moderate reviews, and to enforce our Terms of Service.
  • To answer your messages and process correction, opt-out, and privacy requests.
  • To protect the Site and its users: prevent spam, fraud, abuse, and automated attacks.
  • To understand how the Site is used and improve it (Google Analytics).
  • To show advertising that pays for the Site (Google AdSense).
  • To comply with the law and respond to lawful requests.

We do not use your information to make decisions that produce legal or similarly significant effects about you.

3. Cookies, analytics and advertising

Our own cookies. When you sign in, we set a session cookie, medinfo_session. It keeps you signed in, expires after 30 days, and is removed when you sign out. We also set a security cookie that protects our forms against cross-site request forgery. If you opt out on our Do Not Sell or Share page, we set a cookie, tm_privacy_optout, that records your choice for one year so that we do not load Google Analytics in your browser. These cookies are strictly necessary and are not used for analytics or advertising.

Google Analytics 4. We use Google Analytics to measure visits and page usage in aggregate. It uses cookies (such as _ga) and receives your IP address, device and browser information, and the pages you view. Google states that Google Analytics 4 does not log or store IP addresses. We keep user-level analytics data for no longer than 14 months. Our Google Analytics configuration turns off Google signals and ad personalization signals, so Google Analytics data is not used to personalize ads and is not linked to information from visitors' Google accounts. We do not load Google Analytics if your browser does not let our pages save site data (cookies or local storage), because your opt-out could not be kept there. You can block Google Analytics with the Google Analytics opt-out browser add-on.

Google AdSense. We use Google AdSense to show ads.

Consent management. We use Google’s consent management tool (Google Privacy & messaging) to ask for and record your choices. Visitors in the European Economic Area, the United Kingdom, and Switzerland are asked for consent before advertising and analytics cookies are used. U.S. visitors in states with privacy laws can opt out of personalized advertising. Until a choice is made where one is required, Google tags run in a restricted mode that does not use advertising cookies. Your choices are saved in your browser, in cookies and local storage. You can change it at any time with the privacy choices link in the Site footer. Non-personalized ads may still be shown; they use only limited data, such as your general location and the page you are viewing.

Browser controls. You can delete or block cookies in your browser settings. If you block our session cookie, you will not be able to sign in. We honor the Global Privacy Control signal (see Section 5). Because there is no common standard for “Do Not Track” browser signals, we do not respond to them separately.

4. Service providers and sharing

We share information only as described here:

  • Cloudflare: network delivery, security, and the Turnstile check; also routes incoming email to our support mailbox (privacy policy, Turnstile privacy addendum).
  • Google: analytics, advertising, and consent management, as described in Section 3 (privacy policy).
  • Resend: delivery of the emails we send you, such as replies to your messages (privacy policy).
  • Hosting and content delivery: our servers are run by a hosting provider that stores data on our behalf. When a page loads fonts or scripts from a third-party content delivery network, that network receives your IP address and browser information.
  • The public: published reviews, with your display name, are public.
  • Legal and safety: when required by law, subpoena, or court order, or when needed to protect the rights, safety, or property of our users, the public, or T-MedInfo.
  • Change of ownership: if the Site is transferred to a new operator, information may be transferred as part of that transaction, subject to this Policy.

We do not sell your information to data brokers, and we do not rent or trade email lists.

5. “Sale” and “sharing” under U.S. state laws

We do not sell personal information for money. However, when Google and other ad vendors use cookies on the Site to personalize ads, this may count as a “sale” of personal information, or “sharing” for cross-context behavioral advertising, under the California Consumer Privacy Act (CCPA/CPRA) and similar laws. It may also count as “targeted advertising” under those laws. The categories involved are online identifiers (cookie IDs, IP address), device and browser information, and Site usage information. The recipients are Google and its certified ad vendors.

You can opt out at any time:

Because your choices are saved in your browser, you may need to opt out again on each browser or device, or after clearing cookies and site data. We do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information to infer characteristics about you.

6. How long we keep information

  • Account, reviews, photos, and support tickets: until you delete them or your account. You can delete individual reviews, or your whole account, from your account page. Deleting your account removes your account profile, reviews, review photos, support tickets, and password reset records.
  • Password reset links: expire one hour after they are issued and cannot be reused.
  • Contact form messages, provider requests, emails to us, and our email reply logs: up to 24 months after the last message in the conversation, then deleted. We keep them longer only when needed to resolve a dispute or meet a legal obligation. We keep a record of opt-out and suppression requests for as long as the opt-out is in effect, so that we can keep honoring it.
  • Server and security logs: up to 30 days, unless needed longer to investigate abuse or a security incident.
  • Google Analytics: user-level data for up to 14 months (see Section 3). Advertising cookies set by Google and its vendors are kept according to their own policies.
  • Backups: deleted data may remain in backup copies for a limited period until those copies are overwritten.

7. Your privacy rights

Several U.S. states have consumer privacy laws that give residents rights over their personal information. As of the date of this Policy, these laws are in effect in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Laws in more states take effect in 2027 and later. We honor the requests below from every U.S. user, whatever state you live in. Depending on your state, you have the right to:

If you are in Washington, Nevada, or Connecticut, information about your use of the Site may also be “consumer health data” under those states’ laws. See our separate Consumer Health Data Privacy Policy.

  • Know and access the personal information we hold about you, including the categories, sources, purposes, and the categories of recipients, and get a copy in a portable format;
  • Correct inaccurate personal information;
  • Delete personal information we collected from or about you, with limited legal exceptions;
  • Opt out of the sale or sharing of personal information and of targeted advertising (see Section 5);
  • Limit the use of sensitive personal information (we do not use it for purposes that would trigger this right);
  • Appeal our decision on your request (see Section 8);
  • Not be discriminated against for using these rights. We will not deny you service or change the quality of the Site because you made a request.

Over the last 12 months, we collected the following categories of personal information described in Section 1: identifiers (name, email address, IP address, cookie IDs); internet and network activity (pages viewed, device and browser data); content you submit (reviews, photos, messages); and inferences that Google may draw for advertising if you have not opted out. We collect it from you, from your browser and device, and from our service providers. We use and disclose it for the purposes in Sections 2 through 5.

8. How to make a request

  • Email: support@true-medinfo.com, with “Privacy request” in the subject line.
  • Web form: our Contact Us form. Enter “Privacy request” as the subject.
  • Account self-service: signed-in users can edit their display name, delete reviews, or delete their account on the account page.

Tell us which right you want to use. To protect you, we verify requests by matching the email address you write from with the one in our records. We may ask for a little more information if needed. We never ask for more information than we already hold. An authorized agent may make a request for you with your signed permission, and we may confirm the request with you directly.

We confirm receipt within 10 business days and respond within 45 days. If we need more time, we will tell you why, and we may extend by up to another 45 days where the law allows. If we deny your request, you can appeal by replying to our decision with “Appeal” in the subject line. We will respond within 45 days after receiving your appeal and explain our decision in writing. Where the law allows and more time is reasonably necessary because of the complexity or number of requests involved, we may extend by up to 60 more days. We will tell you about the extension and the reason within the initial 45 days. If you are not satisfied with the outcome, you may contact your state Attorney General.

9. Healthcare providers listed on the Site

Where directory data comes from. Provider and facility pages are built from public U.S. government data. We do not receive it from the providers themselves or buy it from data brokers. The sources are:

  • the National Plan and Provider Enumeration System (NPPES) NPI Registry, published by the Centers for Medicare & Medicaid Services (CMS), which covers names, credentials, practice locations, phone numbers, taxonomy (specialty) codes, and license information that providers report to NPPES;
  • public CMS Medicare datasets: Medicare Physician & Other Practitioners (Part B services), Medicare Part D Prescribers, Doctors and Clinicians, and Medicare (PECOS) enrollment and Order and Referring data;
  • the CMS Open Payments program, which covers payments reported by drug and device manufacturers.

We show this information as published by the source, with the source named on the page. We do not add ratings, credentials, or other claims about a provider that are not in these datasets. Patient reviews are the opinions of their authors.

Corrections. Most errors must be fixed at the source, because our pages are refreshed from it:

  • NPPES data (name, address, phone, specialty): update your record in NPPES. Federal rules require providers to report changes to NPPES within 30 days.
  • Open Payments data: disputes are handled by CMS through the Open Payments program, not by us.
  • If our page does not match the current source, or you believe a review breaks our rules, tell us through the Provider Data Update Request form or at support@true-medinfo.com.

Opt-out. Providers, or authorized representatives of a facility, can ask us to hide their phone number, their practice address, or their entire profile from the Site. Send your request through the Provider Data Update Request form or by email. Include your NPI and tell us what to hide. We may ask you to confirm that you are the provider or are authorized to act for the facility. We honor opt-outs even though the data is public government information. A hidden profile is removed from our search, directory listings, and sitemaps. Please note that we cannot remove your record from NPPES or other CMS datasets. It will remain available from CMS and from other websites that republish it.

10. Children

The Site is meant for a general adult audience and is not directed to children. You must be at least 13 years old to create an account or post content. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we will delete it.

11. Security

We use reasonable safeguards: encrypted HTTPS connections, hashed passwords, signed session cookies, access controls on administrative tools, and automated abuse protection. No website can guarantee complete security. If we learn of a breach that affects your personal information, we will notify you as required by law.

12. Changes and contact

We may update this Policy when our practices or the law change. We will update the “Last updated” date above and, for material changes, post a notice on the Site. The Site is intended for users in the United States. If you access it from elsewhere, your information may be processed in the United States and in other countries where our service providers operate.

Contact: support@true-medinfo.com or our Contact Us form. See also our Terms of Service.