What Information We Collect
| Category | Examples |
|---|---|
| Contact information | Name, address, phone number, email |
| Insurance information | Plan details, member ID, coverage information |
| Clinical information | Diagnostic reports, assessment results, treatment plans, session data |
| Communication records | Emails, call notes, and messages related to your child's care |
How We Use This Information
We use your family's information exclusively to provide, coordinate, and bill for your child's care โ verifying insurance benefits, building and adjusting treatment plans, communicating with you about your child's progress, and, with your explicit consent, coordinating with other providers involved in your child's care (school teams, speech therapists, physicians).
We do not sell your family's information. We do not use it for marketing to third parties. We do not share it outside of what's necessary for treatment, payment, and healthcare operations, or as otherwise required or permitted by law.
Who Can Access Your Information
Access to your family's clinical information is limited to staff directly involved in your child's care โ your BCBA, your child's assigned RBT, and administrative staff handling billing and insurance verification โ each bound by confidentiality obligations under HIPAA and our internal policies.
Third-Party Coordination Requires Your Consent
We do not share information with your child's school, another therapy provider, or any outside party without your explicit, documented consent, except where required by law (such as mandated reporting obligations, which we describe further below).
Data Security Practices
| Practice | Purpose |
|---|---|
| Access controls | Limiting information access to staff with a legitimate need |
| Secure record storage | Protecting physical and electronic records from unauthorized access |
| Staff confidentiality training | Ensuring every team member understands their privacy obligations |
| Secure communication channels | Protecting sensitive information shared electronically |
Mandated Reporting
As with any healthcare provider, Michigan law requires us to report reasonable suspicion of child abuse or neglect to the appropriate authorities. This is a legal obligation that applies regardless of consent, consistent with Michigan's Child Protection Law.
Your Rights Regarding Your Information
You have the right to request access to your child's records, request corrections to inaccurate information, and request an accounting of certain disclosures. These rights are described in more detail, alongside your broader federal privacy protections, in our HIPAA page.
Data Retention
We retain clinical records consistent with Michigan's legal requirements for healthcare record retention, and our own internal retention policy, which we're glad to describe in more detail upon request.
Questions About Your Privacy
If you have any question about how your family's information is handled, contact us directly โ we'd rather answer clearly than have you guess.
Frequently Asked Questions
Do you sell or share our information for marketing purposes?
No. Your family's information is used solely for treatment, payment, and healthcare operations related to your child's care.
Can my child's school access their treatment records?
Only with your explicit, documented consent โ we do not share clinical information with schools or other providers without your authorization.
What happens to our data if we stop services?
Your records are retained consistent with legal record-retention requirements and our internal policy, and are available to you or, with your consent, transferred to a new provider.
Are you required to report anything without our consent?
Yes โ Michigan law requires healthcare providers to report reasonable suspicion of child abuse or neglect, regardless of consent, consistent with mandated reporting laws.
References
- Health Insurance Portability and Accountability Act (HIPAA), 45 CFR Parts 160 and 164
- Michigan Child Protection Law, MCL 722.621 et seq.