Privacy Policy

NPI Data Hub provides NPI provider contact databases and related software services. This policy explains what information we collect, how we use it, and how to contact us with privacy questions.

Information We Collect

We collect information you provide directly, such as your name, email address, organization, support messages, custom-list requirements, correction or sensitive-address reports, checkout details, and operator account information. Payment processing is handled by Stripe, and we do not store full payment card numbers on our servers.

We also collect limited usage and technical information, such as pages visited, device information, browser type, referral source, and product usage events. For abuse prevention, request network evidence may be converted into a keyed hash rather than stored as a raw IP address. We do not send correction free text, provider-row values, access tokens, or signed file URLs to analytics.

How We Use Information

We use information to provide purchased downloads, send purchase confirmations, respond to support and custom-list requests, review data corrections and sensitive-address concerns, improve the website, secure operator accounts, prevent fraud, and measure aggregate product performance.

NPI Provider Data

Our datasets are compiled from publicly available professional and licensing records. Customers are responsible for using downloaded data in compliance with applicable laws, including CAN-SPAM and other outreach rules.

Service Providers

We use service providers for hosting and deployment, database storage and authentication, object storage, payments, email delivery, rate limiting, and privacy-configured analytics. They process information only as needed to help us operate NPI Data Hub.

Retention and Security

Access to support, custom-list, correction, and sensitive-address requests is restricted to authorized operations personnel. We retain those requests for the period needed to respond, preserve suppression or correction evidence, meet legal obligations, and resolve disputes; the initial operational target is resolution plus 24 months unless an active case or applicable requirement needs longer retention.

Your Choices

You can contact us to request access, correction, or deletion of information where legally required. Use the private data-review form for provider-record or sensitive-address concerns. You can also unsubscribe from marketing emails by using the unsubscribe link in those emails.

Contact

For privacy questions, contact us through the contact page or email support@npidatahub.com.