TransitionCare ("we," "us," or "our") operates a web-based patient placement marketplace that connects hospital case managers with licensed Adult Family Home (AFH) operators in Washington State. Our platform is accessible at transitioncare.app (the "Service").
We collect the following categories of information:
Patient data: TransitionCare is designed to handle de-identified patient information only. Case managers must remove all HIPAA-defined direct identifiers (names, dates of birth, Social Security Numbers, Medical Record Numbers, etc.) before uploading any patient profile. We are not responsible for any identifiable health information uploaded in violation of this requirement.
We do not sell your personal information. We may share data with:
We retain account information for as long as your account is active. Audit logs are retained for a minimum of 6 years to support healthcare compliance requirements. You may request deletion of your account by contacting us at nabjill01@gmail.com.
We use industry-standard security measures including TLS encryption in transit, bcrypt password hashing, JWT-based session management, and HTTP security headers. We conduct regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
TransitionCare is intentionally designed to operate without receiving Protected Health Information (PHI). The platform does not provide in-app messaging or free-text fields for patient communication. All patient data uploaded must be de-identified per 45 CFR §164.514(b), and any nuanced patient discussion must occur off-platform (phone, in-person, or via your organization's compliant communication channels).
Because the platform does not receive PHI by design, TransitionCare does not represent itself as a HIPAA "Business Associate" and does not enter into Business Associate Agreements. See our Terms of Use & De-Identification Acknowledgment for full details. Users remain solely responsible for compliance with HIPAA, the Washington My Health My Data Act (MHMDA), and other applicable laws.
This section is provided to comply with the Washington My Health My Data Act (RCW 19.373, "MHMDA"), which gives Washington State residents specific rights with respect to their consumer health data.
Categories of Consumer Health Data Collected. TransitionCare collects the following categories that may, in combination, qualify as consumer health data under MHMDA:
Sources. All consumer health data is provided by case manager users acting on behalf of their employer hospital or healthcare entity. TransitionCare does not collect health data from any other source.
Purposes of Collection and Processing. We process this data exclusively to:
Third-Party Sharing. We do not sell consumer health data. We do not share consumer health data with advertising networks. We do share limited de-identified data with our Subprocessors as necessary to operate the Platform (hosting, email delivery, SMS alerts, payment processing).
Your Rights Under MHMDA. If you are a Washington State resident, you have the right to:
How to Exercise Your Rights. To exercise any MHMDA right, email nabjill01@gmail.com with the subject line "MHMDA Request" and include the nature of your request. We will respond within forty-five (45) days as required by MHMDA, with a possible 45-day extension where reasonably necessary.
Consent for Sharing or Sale. TransitionCare does not share or sell consumer health data outside the limited Subprocessor relationships described above. If we ever introduce new sharing or sale activities, we will obtain valid consent in advance.
Geofencing Restriction. Consistent with MHMDA, TransitionCare does not implement a geofence around any in-person healthcare service.
Other State Privacy Rights. Washington State residents may also have rights under the Washington Consumer Protection Act (RCW 19.86), which provides a private right of action for MHMDA violations.
We use minimal browser storage (localStorage) for session management only. We do not use advertising trackers or third-party analytics cookies.
The Service is intended for healthcare professionals and is not directed to children under 13. We do not knowingly collect personal information from children.
We may update this Privacy Policy periodically. We will notify registered users of material changes by email. Continued use of the Service after the effective date of any change constitutes acceptance of the updated policy.
Questions or concerns about this Privacy Policy: