Our Data Posture
This surface (the BH Family & Individual Action Layer) does not store anything about you.
What we do NOT do
- We do not require you to sign up, log in, or enter your email to use this surface.
- We do not store your screener (PHQ-2 / GAD-2) responses. The result you see is generated in memory and rendered to your browser; nothing is written to a database, log file, or analytics system. If you reload the result page, your responses are gone.
- We do not store your provider-search filters or results.
- We do not store the letters you generate. Letters are rendered in your browser; printing or saving as PDF is a local action on your device.
- We do not use cookies on this surface.
- We do not collect Protected Health Information (PHI). We are not a covered entity under HIPAA.
What we DO collect
- Aggregate cookieless page-view analytics via Plausible: we know how many people visited each page, but not who they were or what they did on the page.
- Server access logs that record the URL of each request + the HTTP status, but NOT the body of POST requests (so your screener responses + letter content never appear in logs).
Why we built it this way
This is a public-benefit surface designed for people in or near a behavioral-health crisis. People in that situation need help, not surveillance. We built this surface so that someone in distress could find 988, a provider, parity information, or workplace rights without ever having to consent to anything, sign up for anything, or worry about whether what they typed will be used against them later. That's the entire point.
Other surfaces on the IHC platform
Other parts of the IHC Behavioral Health Action Dashboard (the employer ROI calculator, the policymaker dashboards) DO collect emails / use access codes / log queries for governance audit purposes, but those are intentionally different audiences with different needs. The Family Action Layer is deliberately distinct.
