Legal

Privacy Policy

This policy explains what information IHA Care collects, how it's used, and how our text-messaging (SMS) program works.

This policy is subject to review by legal counsel and may be updated as the service, vendor relationships, and messaging program develop. Material changes will be reflected on this page.

Who we are

IHA Care is a care-management platform operated by Institute for Human Advancement, an affiliate of the Institute for Human Advancement (IHA), for federally qualified health centers (FQHCs), community health centers, and primary care groups. This policy applies to information we collect through the platform, including our web application and our SMS (text messaging) program.

Information we collect

We collect information necessary to enroll and support you in a care-management program, including:

  • Contact information — name, mailing address, email, and mobile phone number.
  • Practice-readiness information — business contact details, organization, approximate panel range, existing programs, staffing model, EHR environment, and implementation concerns. Do not submit patient information through the public readiness assessment.
  • Health and program information provided by you or your care team as part of enrollment and ongoing care — for example, care plan details, consent records, appointment and check-in information, and program eligibility (e.g., CCM, APCM, CHI, PIN).
  • Communication records — messages sent and received through the platform, including SMS message content and delivery status, kept as part of the care record and compliance documentation.

How we use information

We use the information we collect to:

  • Coordinate your care, including appointment reminders, check-ins, and follow-up outreach from your care navigator or care team.
  • Document services for billing and regulatory purposes on behalf of the health center or practice providing your care.
  • Operate, secure, and improve the platform.
  • Generate a requested practice-readiness snapshot and follow up about IHA Care implementation when you give consent.

We do not sell mobile information or health information. We do not use your information for third-party marketing.

SMS / text messaging program

With your separate, optional consent, your care navigator may enroll you to receive text message check-ins and reminders at the mobile number you provide. Declining SMS does not affect your enrollment in, or receipt of, care-management services.

  • Consent: collected through a guided disclosure read by your navigator (in person or by phone) and recorded, with your yes/no answer timestamped and attributed to that navigator.
  • Message frequency varies based on your care plan and check-in schedule — this is not a fixed cadence.
  • Message and data rates may apply.
  • Opt out at any time by replying STOP to any message. Opting out does not affect your care-management services.
  • Reply HELP for help.
  • The first message you receive identifies the program: “IHA Care Program. Reply STOP to opt out, HELP for help.”

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

How we share information

We share information only as needed to provide your care and operate the platform: with the health center or practice providing your care, with service providers who process data on our behalf under confidentiality and security obligations (for example, our SMS carrier, cloud hosting, and AI drafting providers), or when required by law. We do not sell your information, and — per the SMS section above — we do not share mobile opt-in data or consent with third parties for marketing.

Data security

The platform is built with a HIPAA-aware architecture: tenant-isolated data, append-only audit logging, and access controls limiting who can view program information. Where protected health information (PHI) is involved, we work to have appropriate safeguards and Business Associate Agreements (BAAs) in place with our service providers before that information is processed.

This statement describes the platform's current safeguards; it is not a certification of legal compliance. Covered production use remains subject to the required agreements and organizational controls.

Data retention

Public practice-readiness requests are generally retained for up to two years to provide the requested snapshot and manage follow-up, unless you request earlier deletion or law requires longer retention. Care-management records follow the applicable practice agreement, legal requirements, and approved retention policy.

Your choices and rights

You may opt out of SMS at any time by replying STOP. To ask what information we hold about you, request corrections, or request deletion, contact us using the information below.

Contact us

Institute for Human Advancement
New York City, New York
Email: info@theiha.org
Phone: Contact us by email

Last updated: July 15, 2026