Privacy Policy

Starfish Health Inc. (“Starfish Health,” “Starfish,” “we,” “us,” or “our”) respects your privacy and is committed to protecting information collected through our website. This Website Privacy Policy explains how we collect, use, disclose, and protect information when you visit starfishhealth.com, communicate with us through the website, or use website features such as intake requests, referral forms, insurance verification, or contact forms.

This Website Privacy Policy applies to information collected through our website. Certain health information that Starfish Health creates, receives, maintains, or transmits in connection with healthcare services may also be protected under HIPAA, other federal or state privacy laws, and, where applicable, federal confidentiality requirements governing substance use disorder records. Those practices are described in our Notice of Privacy Practices.

1. Information We Collect

We may collect information that you voluntarily provide to us, including:

  • Name and contact information, including address, telephone number, and email address
  • Date of birth and other demographic information
  • Parent, guardian, or legally authorized representative information
  • Insurance provider, member ID, or policy information
  • Referral information and referral-source information
  • Information concerning the services you are seeking
  • Information submitted through intake, referral, insurance verification, or contact forms
  • Other information you choose to provide

Information Collected Automatically

  • Internet Protocol (IP) address
  • Browser and device type
  • Operating system
  • Pages visited and date/time of visits
  • Referring website
  • General website usage information
  • Cookie or similar technology information

2. How We Use Information

We may use information collected through the website to:

  • Respond to inquiries and requests
  • Process requests for intake
  • Receive and process patient referrals
  • Assist with insurance and coverage verification
  • Contact individuals regarding requested services
  • Coordinate appropriate follow-up
  • Operate, maintain, secure, and improve the website
  • Comply with applicable legal and regulatory requirements
  • Perform other activities permitted or required by law

3. Protected Health Information

Information you provide to Starfish Health in connection with receiving or seeking healthcare may constitute Protected Health Information (PHI) under HIPAA.

Our use and disclosure of PHI is governed by applicable law and our Notice of Privacy Practices, not solely by this Website Privacy Policy.

4. Substance Use Disorder Information

Starfish Health provides behavioral health services that may include substance use disorder treatment.

To the extent information is protected by 42 CFR Part 2 or other applicable confidentiality law, Starfish Health will use and disclose that information in accordance with those requirements and will obtain consent or authorization when required by law.

5. Referral Information

Information submitted through our Refer a Patient process may contain sensitive health information. Referral sources should provide only information reasonably necessary to evaluate and process the referral.

Submission of a referral does not guarantee acceptance into a Starfish Health program and does not constitute emergency care.

6. Insurance Verification

Information submitted through our Verify Coverage process may be used to assist Starfish Health in determining insurance participation, eligibility, or benefits.

Verification of insurance benefits or coverage does not guarantee payment, authorization, eligibility, or coverage for services. Insurance participation may vary by plan and program.

7. Communications

If you provide a telephone number or email address, Starfish Health may use that information to respond to your inquiry or communicate with you regarding services you requested.

Ordinary email and SMS/text messaging may have privacy and security limitations. Selecting email or text as a preferred contact method does not, by itself, authorize disclosure where separate authorization is legally required.

8. General Contact Form

Our general Contact Us form is not intended for detailed medical or behavioral health information.

Please do not submit sensitive medical or behavioral health information through a general contact form. For healthcare-related matters, use the appropriate Request Intake, Refer a Patient, or Verify Coverage workflow.

9. Cookies and Similar Technologies

Starfish Health may use cookies and similar technologies necessary to operate, secure, and improve the website.

A cookie banner or acceptance of this Website Privacy Policy does not constitute a HIPAA authorization for disclosure of PHI.

10. Analytics and Third-Party Tracking

Starfish Health may use analytics or similar technologies to understand website performance and improve website functionality.

We take additional precautions on pages and forms that may collect or transmit PHI. Third-party tracking technologies should not receive PHI unless the disclosure is permitted by law and appropriate contractual and security protections are in place.

11. Service Providers

We may use third-party service providers to assist with:

  • Website hosting and maintenance
  • Secure electronic forms
  • Information technology and security
  • Telehealth and scheduling
  • Communications
  • Insurance verification
  • Payment processing, if applicable
  • Analytics

Service providers that handle PHI on our behalf are required to comply with applicable privacy and security requirements, including entering into a Business Associate Agreement when required.

12. Information Security

Starfish Health uses reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, disclosure, alteration, or destruction.

No website, electronic transmission, or information system can be guaranteed to be completely secure.

13. Telehealth

Starfish Health may provide certain services through telehealth. Telehealth services may involve electronic communications and third-party technology platforms.

Where required, Starfish Health evaluates the privacy and security safeguards applicable to technologies used to provide telehealth services.

14. Children’s Information

Starfish Health provides services to children and adults. Healthcare services involving minors may require involvement or authorization from a parent, legal guardian, or other legally authorized representative, subject to applicable law.

Our general website is intended to provide information about Starfish Health services and is not designed as an online service directed specifically to children under 13. Children under 13 should not independently submit personal or health information through the website.

15. Third-Party Websites

Our website may contain links to websites or services operated by third parties. Starfish Health is not responsible for the privacy, security, content, or practices of third-party websites that are not operated on our behalf.

16. Your Privacy Rights

Depending on the information involved and applicable law, you may have rights concerning your personal or health information. Rights concerning PHI are described in our Notice of Privacy Practices.

17. Privacy Complaints

You may contact Starfish Health if you have questions or concerns regarding our privacy practices or believe your privacy rights have been violated. You will not be retaliated against for filing a privacy complaint.

18. Changes to This Privacy Policy

Starfish Health may update this Website Privacy Policy periodically to reflect changes in our practices, technology, services, or legal requirements. When we make changes, we will update the Last Updated date at the beginning of this document.

19. Contact Us