Legal

Privacy Policy

Effective July 1, 2026 · Applies to the myFHC mobile app and the Florida Healthcare Collective web portals. For how we handle protected health information as a HIPAA-covered entity, see also our Notice of Privacy Practices.

Who we are

Florida Healthcare Collective (“FHC”) is a Florida private-duty nursing practice and a HIPAA-covered entity. The myFHC app is the workspace healthcare professionals use for credentialing, scheduling, tasks, and secure messaging.

What we collect

  • Account & identity: name, email, phone, username, and profile photo.
  • Credentialing information: licenses, certifications, and the documents you upload for credentialing (required by Florida law).
  • Messages & content you create: secure chat messages, attachments, voice notes, tasks, and notes. Message content is encrypted at rest.
  • Scheduling: the shifts and workplaces you choose to record.
  • Device & security data: device model/OS, a per-device identifier, IP address, and sign-in history — used for session security and required security auditing.
  • Push token: an opaque Apple push token so we can deliver notifications.

The app does not collect your location, does not show ads, and contains no third-party analytics or tracking SDKs. Voice dictation for notes is processed on-device.

How we use it

  • Operate our private-duty nursing services: credentialing, referrals, scheduling, and secure communication.
  • Protect accounts: session management, device revocation, and abuse prevention.
  • Meet legal obligations: HIPAA security auditing and Florida record-keeping requirements.

We do not sell personal information, and we do not use health information for advertising. Push notifications never contain message content or health information.

How we protect it

  • Encryption in transit (TLS) and at rest (encrypted database and storage volumes).
  • Message bodies and chat attachments are additionally encrypted at the application layer.
  • Per-device sessions with remote sign-out, automatic timeouts, and biometric app lock.
  • Append-only audit trails of access to protected information.

Sharing

We share information only with: (a) the healthcare facilities and clients to whom you are referred or with whom you communicate through the platform; (b) service providers that host our infrastructure (Amazon Web Services, under a Business Associate Agreement); and (c) authorities when the law requires it. Apple receives only the opaque push token needed to deliver notifications.

Retention & account deletion

You can delete your account at any time in the app under You → Security → Delete account. Deletion permanently closes your login and signs out every device immediately. Care and credentialing records are retained for the period required by Florida law (Fla. Stat. §400.512) and applicable federal law, then disposed of per our retention schedule. You may also email us (below) to request deletion. The steps, and what is deleted and kept, are on Delete your myFHC account.

Your choices

  • Notifications are optional and configurable per category in the app.
  • Biometric lock (Face ID / Touch ID) can be turned on or off in Security.
  • You may request a copy or correction of your information at any time.

Contact

Florida Healthcare Collective — Privacy Officer
admin@flhealthcarecollective.com
We answer privacy requests within 30 days. If we make material changes to this policy, we will update this page and the effective date above.