Privacy Policy

Introduction

NexaCare Management, LLC (“NexaCare,” “we,” “us,” or “our”) operates a care-management platform that helps independent weight-management clinics support their patients through the CarePath SMS program. This Privacy Policy explains how we collect, use, and protect information related to our services.

By enrolling in the CarePath program through a participating clinic, or by using our website at nexacaremanagement.com, you agree to the practices described in this policy.

Information We Collect

Clinic Partner Information

• Business contact name, email, and phone
• Clinic name, address, and state of operation
• Billing information processed securely via Stripe

Patient Information (collected via clinic intake)

• First name and mobile phone number
• Preferred language (English, Spanish, or French)
• Enrollment date and program participation data (CarePath day, message responses)
• Only the last four digits of a phone number are stored in application logs

Website Usage Data

• Anonymous page-view and traffic data via Google Analytics (GA4)
• No personally identifiable information is collected through website analytics

SMS / Text Message Communications

NexaCare Management sends automated SMS messages to patients who have explicitly opted in through a clinic enrollment form.

Opt-In Consent

Patients provide explicit written consent by checking a mandatory opt-in checkbox on their clinic’s enrollment form before receiving any messages. No messages are sent without this consent. Consent to receive SMS messages is not a condition of treatment or enrollment in any clinical service.

Message Frequency

Up to 20 messages over a 90-day enrollment period. Message frequency varies based on program phase (weekly during Activation and Momentum phases; bi-weekly during Retention Lock phase).

To Opt Out

Reply STOP to any message at any time to immediately unsubscribe. You will receive one confirmation message and no further messages will be sent.

For Help

Reply HELP to any message, or contact us at contact@nexacaremanagement.com.

Non-Sharing Policy

We do not sell, rent, or share your mobile phone number with third parties for their marketing or promotional purposes.

Carrier Disclaimer

Carriers are not liable for delayed or undelivered messages.

Cost

Message and data rates may apply.

How We Use Information

• Delivering CarePath wellness check-in SMS messages to enrolled patients
• Monitoring program engagement and churn-risk signals to support clinic care teams
• Billing clinic partners for monthly care-management services
• Improving the CarePath message sequence and program outcomes
• Complying with applicable law and our HIPAA obligations

Information Sharing

We do not sell personal information. We share data only with the following service providers, each operating under appropriate data agreements:

• Amazon Web Services (AWS) — cloud infrastructure and database hosting. A Business Associate Agreement (BAA) is executed for patient data.
• Twilio — SMS message delivery. A Business Associate Agreement (BAA) is executed for patient communications.
• Stripe — clinic billing and payment processing. No patient health data is shared with Stripe.

We do not share mobile phone numbers or patient information with third parties for marketing or promotional purposes.

Data Security

Patient data is stored in HIPAA-eligible AWS RDS infrastructure (us-east-2 region) under an executed AWS Business Associate Agreement. Data is encrypted at rest and in transit. Access is restricted to authorized NexaCare personnel only.

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. However, no transmission over the internet can be guaranteed to be 100% secure.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: