Privacy policy

RehabSignal sells US addiction treatment centers a flat monthly plan covering admissions software, a website and hands-on marketing by our staff. This page sets out what information reaches us, why, who else receives it, and the requests you're entitled to make. “We” and “us” are RehabSignal. “You” is the reader: a visitor to rehabsignal.com, someone with a demo booked, or an owner, director, admissions coordinator or BD rep at a center we serve.

Callers, families and alumni of a treatment center have their own section further down. Their records are the center's, and we keep them for it.

Information you give us

Forms on this site. A demo request or question arrives with whatever you entered, which tends to be a name, your center, an email, a callback number and a line or two about your admissions setup.

Demo calls. We keep the time you picked, how to reach you and our notes on the call: say, your programs, your census and who answers your admissions line after hours.

Messages. Emails and texts you send us sit beside our answers, so whoever replies next on our side knows the thread.

Centers we serve. Running a plan means a center hands us the names of its point people, how it pays us, access to the ad, listing and phone accounts we manage for it, and what its website needs: logo, photos, licenses, accreditation and descriptions of each program.

Information gathered automatically

Each visit leaves a short trail with our site and its analytics tool: device type, browser, IP address, pages viewed, minutes on each, and the address you came from.

Some RehabSignal ads carry a number of their own. Some links we share carry a campaign label. Calls to those numbers log the caller's number, the time, the length and the ad; a labeled link logs the campaign behind the click.

Uses

Mainly, it lets us reply, hold your demo and explain the plan.

For a center we serve, it also goes into building the center's software, phones and website, billing it, writing its month-end report, and the daily work of its account manager and ad rep.

Visit trails, ad numbers and campaign labels tell us which RehabSignal ads and pages pay off and what to fix on our own site.

And some of it guards our systems, catches fraud and misuse, meets the law and backs up our service terms.

Where it goes

RehabSignal has never sold anyone's personal information, and won't. Here is every route by which it leaves us.

Vendors. A handful of outside companies keep RehabSignal running. They host it, supply the software beneath it, deliver our email and texts, carry and track calls, count visits, book demos and charge cards. Each sees only what its piece of the work requires, for that piece alone.

The ad companies. Running a center's ads means sharing the center's business details with the companies that show them. Records about inquiries and clients are never among them; “What ad companies receive” below lists what they do get.

Court orders and safety. We hand over information when a subpoena, court order or other legal duty compels it, when a person's safety is at stake, or to defend RehabSignal. Records we hold for a center go out only as its BAA and federal Part 2 law allow.

A sale. If RehabSignal is bought or merged, information goes with it and stays under this policy.

Anything beyond that needs your okay first.

Our texts to you

Once you've shared your cell and opted in, texts from us are limited to the kinds our texting rules list. A STOP reply to one of them ends all of them. That number, and the record that you agreed, never go to an outside company or affiliate for marketing.

Center records we hold

Treatment centers on RehabSignal answer their phones, texts and site chat, book screenings and assessments, send pre-admission and consent forms, take self-pay deposits and run a family portal and alumni app with our software. That puts records about each center's inquiries, clients, families and alumni on our systems, kept for the center. Those records can show who got in touch and their callback details, who an inquiry was for, the program asked about, recorded calls and transcripts, texts and emails, signed forms, ID and insurance card photos, admit dates, payments, family portal logins and alumni event sign-ups.

Under HIPAA, we act as each center's business associate. Texts, calls, recordings and forms run in HIPAA mode, under a BAA your center signs with us. The BAA and the center's own privacy notice govern those records, this page doesn't, and they're used for nothing beyond what the center signed up for.

ID and insurance card photos go to the center's own billing team. Card payments go through an outside processor held to the card industry's PCI DSS standard; RehabSignal never stores full card numbers.

Anyone who called or stayed at a center using RehabSignal should ask that center about their records first. Whatever you send us about them, we forward to the center.

Part 2 records

Most centers are bound by 42 CFR Part 2, the federal rule on records of substance use care. Under it, even saying that someone called a center or was a client there is a disclosure. Anything we hold that could show a person looked into treatment, or received it, is handled under that rule, and shared only with that person's written consent or where the rule itself permits.

Each center's account is set up for Part 2: consent on every form, no ad pixels on inquiry pages, and review replies that never confirm someone was a client.

A text to someone who hasn't confirmed anything stays in neutral words. A family member hears about a client only after the client signs a consent naming that person, and a referral partner only on the same terms. Each center's consent wording comes from the center or its counsel.

What ad companies receive

We run a center's ads on Meta, Google and Microsoft from ad accounts the center owns. A conversion from one of those ads is reported by our software, not by the web page, and holds only the ad's click ID, a neutral event name, a value and the time.

An ad company never receives anyone's name, email address or phone, hashed or not. Neither do page addresses with treatment words in them, or anything typed into a form. Inquiry pages, forms and thank-you pages on the sites we build carry no ad pixels, and lists of inquiries or clients are never uploaded to any ad company.

Cookies

A cookie is a small file your browser stores for a site. Ours, and similar tools, keep pages running, hold your settings, count visits and trace how people find their way around.

Our analytics tool sets some of them, and its own policy covers what it gathers. Your browser can block or wipe cookies, at the cost of a page or two misbehaving.

As for “do not track” requests from browsers, no standard says how to honor them, so rehabsignal.com responds to every visit alike.

Keeping it and guarding it

Information stays only while a purpose on this page still needs it. A center's stays through its plan and afterward while tax law, other legal duties or an unsettled dispute call for it. If you asked about RehabSignal and never signed up, yours stays while we're talking and for a sensible stretch after.

Then we erase it, or scrub out names and anything else that points to a person. What happens to a center's records at the end (return, keep or erase) follows its BAA.

Our safeguards reach both our staff's habits and our systems' design. A record opens only for people whose job needs it, and an audit log shows who changed each record and when. Nothing online is unbreakable, so no promise of zero breaches is possible. If one touches your information, you're told within the legal deadline; if it touches a center's records, the center hears from us as its BAA requires.

Your rights under state law

Depending on your state, you can ask to view the personal information RehabSignal keeps on you, take a copy, fix errors, have it erased, and refuse both its sale and targeted ads built on it.

Email sales@rehabsignal.com naming the right you're using. Once we've confirmed it's really you, the answer comes inside the legal deadline. Someone acting for you with your signed permission can ask too. There's no charge for asking, and asking won't change your standing with us. If we refuse, we say why. In states with an appeal right, replying to our decision starts one. If it fails, complaints go to the attorney general of your state.

For records a center keeps, the center is the one to ask.

California. Californians' rights here include knowing which kinds of personal details we gather, where they come from, our reasons and who receives them: the first four sections of this page cover all of it. RehabSignal doesn't sell personal information or share it for another company's ads. Under California law, a few things we hold (logins and card details) are sensitive, and they serve one purpose: running RehabSignal safely.

Children, updates and contact

rehabsignal.com is meant for adults who run or work at treatment centers. Nobody under 13 should be sending us information here, and we don't knowingly collect it; if a child has, let us know and it gets erased. A center's records about clients under 18 are kept for the center under its BAA, the same as all its records.

Revisions show up as a new date in the banner above, and centers we serve get an email about any big change.

Write to sales@rehabsignal.com if anything here is unclear or to learn what we keep on you. Each email gets a reply from a person here.