Privacy Policy

1. Who We Are

MedBid Inc. ("MedBid," "we," "our," or "us") operates the website medbid.ai and related services (collectively, the "Platform"). MedBid is a reverse-bid healthcare marketplace that connects patients seeking medical and wellness services with verified providers.

This Privacy Policy explains how we handle information collected through our Platform. By using MedBid, you agree to the practices described here.

2. Information We Collect

Information You Provide Directly

• Contact information: Name, email address, phone number
• Location information: ZIP code and search radius (your precise address is never shared without your consent)
• Request details: Procedure or service requested, payment method (cash, insurance, HSA/FSA), timing preferences, target budget, and any additional notes you choose to provide
• Language preference: For provider matching purposes
• Provider information: If you register as a provider, we collect professional credentials, license numbers, practice information, and billing details

Information Collected Automatically

• Browser type, operating system, and device information
• IP address and general geographic location
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 6)

Information from Third Parties

We may receive information from identity verification services, provider credentialing databases, and analytics partners to improve the quality of matches and the security of the Platform.

3. How We Use Your Information

We use the information we collect to:

• Match your service request with verified providers in your area
• Deliver bid notifications by email or SMS
• Verify provider credentials and maintain platform integrity
• Process accepted bids and facilitate appointment bookings
• Communicate with you about your account, requests, and bids
• Improve the Platform, develop new features, and conduct analytics
• Build and improve our proprietary healthcare price dataset (in de-identified, aggregated form only)
• Comply with legal obligations, resolve disputes, and enforce our Terms of Service
• Send optional marketing communications (only with your consent; you may opt out at any time)

We do not sell your personal information to third parties for their own marketing purposes.

4. HIPAA and Health Information

MedBid takes the privacy of your health information seriously. The health-related details you submit in a care request — such as the type of procedure, body part, or medical history notes — are treated as sensitive health information.

What this means in practice:

• Your health-related request details are encrypted in transit and at rest
• Providers only receive your health-related request details after you choose to share them by accepting or engaging a bid — never before
• We maintain administrative, technical, and physical safeguards consistent with HIPAA requirements for the protection of health information
• We enter into Business Associate Agreements (BAAs) with service providers who handle health information on our behalf
• We do not share identifiable health information with advertisers, data brokers, or unaffiliated third parties

5. How We Share Information

With Providers

Providers see only the anonymized details of your request (procedure type, ZIP code, timing, budget range) until you accept or engage their bid. At that point, you control what additional contact and health information is shared to facilitate booking.

With Service Providers

We share information with trusted third-party vendors who help us operate the Platform — including cloud hosting, email delivery, payment processing, identity verification, and analytics. These vendors are contractually prohibited from using your data for any purpose other than providing services to MedBid.

For Legal Reasons

We may disclose information if required by law, legal process, or governmental authority, or if we believe disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our Terms of Service.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform if such a transfer occurs.

Aggregated and De-identified Data

We may share aggregated, de-identified data (such as average bid prices by region) with partners, researchers, or the public. This data cannot be used to identify you.

6. Cookies and Tracking

MedBid uses cookies and similar technologies to:

• Keep you logged in and remember your preferences
• Understand how the Platform is used (analytics)
• Improve Platform performance and relevance

You can control cookies through your browser settings. Disabling cookies may affect some Platform functionality. We do not use cookies to serve third-party advertising.

7. Data Security

MedBid uses industry-standard security measures to protect your information, including:

• 256-bit SSL/TLS encryption for all data in transit
• Encryption of health-related data at rest
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews and vulnerability assessments

No method of electronic transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will notify you as required by applicable law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the link in the email or by contacting us
• Data portability: Request your data in a portable format where technically feasible

California residents: You have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and sold, and the right to opt out of sale. MedBid does not sell personal information.

To exercise any of these rights, contact us at privacy@medbid.ai. We will respond within 30 days.

9. Children's Privacy

MedBid is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@medbid.ai and we will delete it promptly.

If you are submitting a request on behalf of a minor in your care, you represent that you have the legal authority to do so.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of MedBid after a policy change constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us: