Privacy Policy for CredHawk

Effective Date: June 19, 2026

AlterMed RCM LLC ("AlterMed RCM LLC," "Company," "we," "our," or "us") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use the CredHawk mobile application, website, and related services (collectively, the "Service").

CredHawk is a secure software platform that enables healthcare organizations to manage provider credentialing, licensing, enrollment, onboarding, compliance, and related administrative workflows. AlterMed RCM LLC provides the technology platform and does not independently collect, use, or process client credentialing information for its own business purposes beyond operating, maintaining, securing, and supporting the Service.

By downloading, registering for, or using the Service, you agree to this Privacy Policy.

1. Information We Collect

A. Information Provided by Client Organizations and Users

Information entered into CredHawk is uploaded, maintained, and controlled by the applicable healthcare organization or authorized user as part of its credentialing, enrollment, onboarding, licensing, and compliance workflows.

Depending on how your organization uses the Service, information may include:

Account Information
  • Name
  • Business email address
  • Phone number
  • Organization
  • User role
  • Login credentials
Provider Information

Provider information maintained within the platform may include:

  • National Provider Identifier (NPI)
  • CAQH ID
  • Professional license numbers
  • DEA registration numbers
  • Taxonomy codes
  • Specialties
  • Employment history
  • Other credentialing or enrollment information required by the client organization

Some organizations may choose to store additional identifiers (such as Social Security Numbers or other sensitive information) within their own credentialing records. Such information is uploaded, maintained, and controlled solely by the client organization. AlterMed RCM LLC does not use this information for its own marketing, analytics, or independent business purposes.

Uploaded Documents
  • Licenses
  • Certifications
  • Identification documents
  • Enrollment documentation
  • Compliance documentation
  • Other credentialing-related files
B. Information Automatically Collected

When you use the Service, we may automatically collect:

  • Device information
  • Browser type
  • Operating system
  • IP address
  • Device identifiers
  • Usage logs
  • Crash reports
  • Performance metrics
  • Network information

This information helps us maintain security, improve performance, and enhance the user experience.

2. How We Use Information

We use information to:

  • Provide and maintain the Service
  • Authenticate users
  • Support provider credentialing, licensing, enrollment, onboarding, and compliance workflows
  • Enable healthcare organizations to manage providers and licensed professionals
  • Provide customer support
  • Send notifications regarding accounts, credential expiration, compliance deadlines, and workflow updates
  • Improve application functionality
  • Monitor security, detect fraud, and maintain system integrity
  • Comply with applicable legal obligations

AlterMed RCM LLC does not sell provider information or use client credentialing data for unrelated commercial purposes.

3. Healthcare Organizations We Serve

CredHawk supports organizations across multiple healthcare sectors, including but not limited to:

  • Physician practices
  • Hospitals and health systems
  • Dental organizations
  • Behavioral health organizations
  • Therapy organizations
  • DME suppliers
  • Home health agencies
  • Allied health organizations
  • Other healthcare provider groups

4. Protected Health Information (HIPAA)

Where applicable, AlterMed RCM LLC handles Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA), applicable federal and state laws, and any executed Business Associate Agreement (BAA).

5. Ownership of Information

Provider information, credentialing records, enrollment information, and uploaded documentation remain the property of the applicable healthcare organization or provider, subject to applicable laws and contractual agreements.

AlterMed RCM LLC serves solely as the technology provider hosting and supporting the platform. Client organizations are responsible for determining what information is collected, uploaded, maintained, and shared through the Service.

6. Disclosure of Information

To Your Organization

Information may be shared with authorized administrators and personnel within your affiliated organization.

To Service Providers

We may share information with trusted vendors who provide services such as:

  • Secure cloud hosting
  • Data storage
  • Customer support
  • Analytics
  • Communication services

These providers are contractually obligated to protect the confidentiality and security of information.

Legal Requirements

We may disclose information when required to:

  • Comply with applicable laws
  • Respond to subpoenas or court orders
  • Cooperate with regulatory authorities
  • Protect our legal rights
Business Transfers

Information may be transferred during a merger, acquisition, restructuring, or sale of AlterMed RCM LLC assets.

7. Data Security

AlterMed RCM LLC maintains a comprehensive information security program designed to protect information against unauthorized access, disclosure, alteration, and destruction.

Our safeguards include:

  • Role-based access controls
  • User authentication
  • Encryption of data in transit using TLS/SSL
  • Encryption of stored data where appropriate
  • Secure cloud infrastructure
  • Network and firewall protections
  • Security monitoring and logging
  • Routine software updates and vulnerability management
  • Access auditing and administrative controls

Although we employ commercially reasonable safeguards, no method of electronic transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.

8. Data Retention

Information is retained only as long as necessary to:

  • Provide the Service
  • Meet contractual obligations
  • Support client organizations
  • Comply with legal requirements
  • Resolve disputes
  • Enforce agreements

Retention periods may vary according to organizational policies and applicable laws.

9. Your Rights and Choices

Depending on applicable law, you may have rights to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of information (subject to legal and organizational requirements)
  • Manage communication preferences

Requests regarding provider records should generally be directed to your affiliated organization, which controls the information stored within the platform.

10. Children's Privacy

CredHawk is intended solely for authorized business users who are 18 years of age or older.

We do not knowingly collect information from children under 18 years of age.

11. Changes to This Privacy Policy

AlterMed RCM LLC may update this Privacy Policy periodically.

Material changes will be communicated through the Service, website, or email where appropriate. Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

12. Contact Information

If you have questions regarding this Privacy Policy or our privacy practices, please contact:

AlterMed RCM LLC – CredHawk Privacy Officer
Email: support@credhawk.co
Website: www.credhawk.co