Effective September 15, 2026

Privacy policy

This policy describes how the PrimeVital Opportunity Navigator handles information when you look up a practice, complete an assessment or ask PrimeVital to contact you.

1. Scope

This policy applies to the Opportunity Navigator at access.theprimevital.com. It does not replace the terms or privacy notices that may apply to a later client engagement, contracted service or third-party platform.

2. Information used to create the assessment

When you enter an NPI, the application retrieves public provider and Medicare information from sources such as NPPES and CMS. Assessment answers and supported aggregate files are processed in the browser in the current version and are not added to the lead database unless you separately request a PrimeVital review.

3. Information collected when you request contact

If you opt in, PrimeVital stores your organization name, NPI, name, work email, role, optional phone number, preferred contact method, referral or campaign parameters, and a limited non-patient assessment summary. The summary can include selected payer categories, workflows, operating priority, delivery preference, current program status, readiness level and condition names surfaced by the assessment.

4. Do not provide patient information

Opportunity Navigator is not a patient portal. Do not enter patient names, dates of birth, medical record numbers, claim-level files, passwords or other protected health information. Contact PrimeVital separately before transferring regulated or contract-restricted information.

5. Purpose and legal basis

PrimeVital uses an opted-in contact record to respond to your request, understand the assessment context, discuss potentially relevant services and improve follow-up. Submission is optional and does not change or unlock the preliminary report.

6. Consent record

The database records the consent language, consent version and timestamp associated with each contact request. PrimeVital does not use this consent to authorize unrelated patient-data processing or the sale of personal information.

7. Retention

Contact requests and their Google Workspace copies are scheduled for deletion 180 days after submission. Expired records are pruned as the service processes requests. If the organization enters a client relationship, information needed for that relationship may instead be retained under the applicable agreement, accounting requirements and client privacy notice.

8. Service providers and disclosures

PrimeVital uses hosting, database, security and Google Workspace services to operate the application, retain opted-in requests, notify the PrimeVital team and maintain an authorized lead workspace. Those providers may process routine request metadata such as IP address, browser information and timestamps. PrimeVital may also disclose information when required by law, to protect the service or in connection with a corporate transaction subject to appropriate safeguards. PrimeVital does not state that this contact system is a HIPAA-designated system.

9. Your choices

You can use the preliminary assessment without submitting a contact request. After submission, the application provides a unique deletion code. Enter it below to remove the matching contact request and its Google Workspace row. You may also contact PrimeVital through the information published on theprimevital.com to ask about access, correction or deletion rights that may apply.

Delete a contact request

Use the code shown immediately after the request was saved. The code is not stored in readable form, so PrimeVital cannot recover it for you.

10. Security and changes

PrimeVital uses reasonable technical and organizational safeguards, but no internet service can guarantee absolute security. This policy may change as the product, vendors or legal requirements evolve. Material changes will be reflected by a new effective date and consent version.

Legal review: this operational policy reflects the product implemented today. PrimeVital should have qualified privacy counsel review the corporate policy, state-law disclosures, vendor agreements and future marketing practices before materially expanding collection or adding patient-related data.