Your privacy, in plain English.
We're in the business of care, not data. Here's exactly what we collect, why we collect it, who touches it, and what your choices are. The short version first, then the full policy.
Effective date: July 11, 2026
This Privacy Policy explains how everydaymd ([LEGAL ENTITY NAME], "everydaymd," "we," "us") collects, uses, and protects information when you visit everydaymd.health, book a visit, or communicate with us. Health information you share within a clinical visit gets additional protections under our HIPAA Notice of Privacy Practices. More on that below. By using our website or services, you agree to the practices described here and in our Terms of Service.
Information we collect
We keep this deliberately small. Here's the complete picture:
- Booking information. When you book a visit, we ask for your name, email address, phone number, state of residence, the treatment area or areas you select, and any optional notes you choose to share. That's what your doctor needs to prepare for your visit. Nothing more.
- Payment information. Payments are processed by Stripe, a payment processor. Your card details go directly to Stripe over an encrypted connection; we never see or store your full card number. We receive confirmation that payment succeeded, along with the kind of summary you'd expect on a receipt.
- Visit and health information. What you discuss with your clinician (your history, symptoms, diagnoses, plan of care) is handled within the clinical relationship and protected as described in our HIPAA Notice of Privacy Practices.
- Communications. If you email support@everydaymd.health or call (412) 407-3389, we keep the correspondence needed to help you and to keep an accurate record of your requests.
- Basic technical data. Like nearly every website, our hosting infrastructure keeps standard server logs (such as IP address and pages requested) to serve the site and keep it secure.
We do not collect information we don't need, and we don't buy data about you from anyone.
How we use it
We use your information to:
- Schedule your visits and match you with a clinician licensed in your state
- Support your care, including follow-up and plan adjustments by your clinician
- Send confirmations, reminders, and receipts for visits you've booked
- Respond when you contact us for support, including refund and cancellation requests under our refund policy
- Meet our legal, tax, and medical record-keeping obligations
That's the whole list. We don't use your information to build advertising profiles, and we don't send marketing on behalf of anyone else.
Who touches your information
A small set of service providers helps us run the platform. We name them because you deserve to know:
- Stripe processes payments. Your card details go to Stripe directly; we never see full card numbers.
- Supabase hosts our scheduling database and sign-in system. It stores your booking details (name, contact information, state, chosen treatment areas, appointment time, and any note you add) so we can schedule you and so you can see your visits in the patient portal.
- Resend is the email-delivery service that sends your booking confirmations, reminders, and sign-in links.
- doxy.me hosts our video visits. It is a telemedicine platform designed for HIPAA-compliant use, and your visit happens in a private video room, not on a consumer video app.
- Google Fonts supplies the typefaces on this site. Your browser requests the font files from Google's servers, which involves Google receiving your IP address, as with any file loaded from the web.
- Our web-hosting provider serves this website and maintains standard server logs.
- Analytics may run, but only if and when we enable it. If we turn on website analytics (such as Google Analytics), it would measure how the site is used in aggregate, not the contents of your visits or your medical records. As of the effective date above, we do not run advertising trackers, retargeting pixels, or social-media trackers on this site.
Each provider receives only what its job requires. We do not sell your personal information to anyone, and we do not share it for cross-context behavioral advertising. We may disclose information if the law requires it (for example, in response to a valid legal process) or to protect the safety of a patient or the public, consistent with our HIPAA Notice.
Browser storage
To carry your booking details from the scheduling form through checkout, our site holds them briefly in your browser's local storage. Once your booking is complete, they're cleared. We don't use this storage to track you across other websites.
A note on your health information
This policy covers our website and general business operations. Information you share within a clinical visit (with your doctor, in your chart, in secure messages about your care) is protected health information and is handled according to our HIPAA Notice of Privacy Practices, which describes your rights under federal law in detail, including how to request copies of your records. If this policy and the HIPAA Notice ever appear to conflict about health information, the HIPAA Notice controls. You can read about the telehealth relationship itself in our Telehealth Consent.
How long we keep it
We keep information only as long as we need it. Medical records are retained for the period required by the medical record-keeping laws of the states where the clinicians who treat you are licensed, which is typically several years or more. Booking, payment, and support records are kept as long as needed for care coordination, accounting, and legal compliance, then deleted or de-identified. Booking details held in your browser's local storage are cleared once checkout is complete.
How we protect it
We use encryption in transit (HTTPS) across the website, choose service providers designed for handling sensitive information, and limit access to your information to the people who need it to take care of you. We'll be honest with you the way we are about medicine: no system on earth is perfectly secure, and we won't pretend ours is the exception. What we can promise is that we take reasonable, industry-standard measures, we keep our data footprint small on purpose, and if a breach ever affects your information we will notify you as required by law.
Your rights and choices
You can ask us to:
- Show you the personal information we hold about you
- Correct anything that's inaccurate
- Delete your information, where the law allows. Medical records must be retained for legally required periods, so some information can't be deleted on request, but we'll tell you exactly what we can and can't do
To exercise any of these rights, email support@everydaymd.health or call (412) 407-3389. We'll verify your identity before acting on a request, which is a protection, not an obstacle. We won't treat you any differently for exercising your rights.
If you live in California or another state with a consumer privacy law, you may have additional rights, such as the right to know the categories of information collected and disclosed, the right to request deletion, and the right to non-discrimination. Because we do not sell personal information or share it for targeted advertising, there is nothing to opt out of on that front. The other rights work the same way: email us and we'll handle it.
Children
everydaymd serves adults 18 and older. Our website and services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
Changes to this policy
If we change this policy, we'll post the updated version here with a new effective date. If a change meaningfully affects how we handle your information, we'll make that plain, with a clear note on this page or a direct message to active patients, rather than burying it. Quiet edits to important terms aren't how we do things.
Contact us
Questions about this policy or your information? We're easy to reach.
- Email: support@everydaymd.health
- Phone: (412) 407-3389
- Mail: everydaymd, [REGISTERED ADDRESS], Pittsburgh, Pennsylvania
You can also reach us through our contact page. For details on payments and cancellations, see our Refunds & Cancellation policy; for the rules of using the service, see our Terms of Service.