Privacy policy

DRAFT — pending attorney review. This text is not final.

Last updated October 29, 2026 (draft 5)

This policy explains what information Kitzer, LLC ("ClearProviders", "we", "us"), 82 Nassau St #60540, New York, NY 10038, collects when you use clearproviders.com, and how we use it. ClearProviders is a healthcare price search service. We do not provide medical care. The public site does not ask for your health information.

Employer, member and point-of-care portals have their own privacy notice. Health information in those portals is handled separately, under our agreements with employers' health plans.

If you live in Washington, Nevada, Connecticut or another state with a consumer health data law, our Consumer Health Data Privacy Policy explains how we handle consumer health data.

Information we collect

  • Searches and pages you view, counted in aggregate. We count page views and searches so we can improve results and measure demand for prices. These are totals, not records about you (see "Analytics" below).
  • Approximate location. If you type a ZIP code or city, or use "use my location", we use it to sort results by distance. Device locations are rounded to about 1 kilometer in your browser before they are sent. We remember the last place you searched in a cookie so you don't have to retype it. We may also use the approximate location (city or region) that our network provider derives from your IP address.
  • Device signals, only to stop automated scraping. A small script on our pages checks technical characteristics of your browser and device:
    • screen size, time zone and language settings;
    • available fonts;
    • how your browser draws graphics and audio;
    • signs of automated browsers;
    • the timing of mouse, scroll, touch and key events (not what you type).

    These signals are hashed in your browser. Only the hashed values are sent to us; we never store the raw values. We use them, with your IP address and network, to set a signed security cookie, apply daily limits on detailed price views and detect bots. Our security systems may show a challenge, such as a Cloudflare Turnstile check or a short computing puzzle, or may temporarily block access. Device security profiles (request counts and yes/no signals) are kept for about 2 days, and security logs for 30 days. Device signals are never linked to the health services, providers or searches you view.

  • Analytics, aggregate counts only. We run our own first-party analytics, and it keeps no record per visitor. We keep daily counts of:
    • page views by type of page (for example "a provider page", not which provider);
    • referring sites (the site name only);
    • coarse region (state);
    • search terms, as daily totals per term. Rare terms are not shown in our reports.

    To count unique visitors, we use a hash that changes every day and is deleted after 2 days. No search term or page is tied to you or to that hash. We do not use Google Analytics, advertising trackers or social media pixels.

  • Messages you send us, for example through the contact form, including your email address.
  • Provider accounts. If you claim a provider page, we collect your name, work email, password (stored only as a secure hash) and the information you enter about your practice. If you verify a practice, we may also collect the practice phone number, the NPI registry details you give us, and any document you upload (stored encrypted). We log changes for security.
  • Verification calls and texts. If a practice is verified by phone, we place an automated call or send a text with a one-time code to the practice's listed number. We record that a message was sent, but not the code.

How we use information

  • to provide and improve search results;
  • to show providers aggregate demand (for example, how many people requested their prices), never who you are;
  • to verify provider accounts;
  • to secure the service, enforce our Terms and prevent scraping and abuse;
  • to reply to you.

What we don't do

  • We don't sell your personal information or share it for cross-context behavioral advertising.
  • We don't share your searches with providers or employers in a way that identifies you.
  • We don't use your information for targeted advertising.

Cookies

We use a small number of first-party cookies:

  • to remember your last search location;
  • a signed security cookie and a short-lived session cookie used for abuse prevention (the session cookie also lets us count unique visitors per day, as described above);
  • sign-in cookies if you have an account.

We don't use third-party advertising cookies. Security challenges from Cloudflare may set their own cookies. We honor Global Privacy Control signals as an opt-out of any sale or sharing. We don't sell or share in the first place, so the signal doesn't change how the site works.

Service providers

We use providers that process information only on our behalf, under contract:

  • hosting;
  • content delivery and security (including Cloudflare);
  • email delivery (Amazon Web Services);
  • telephone and text delivery for verification codes;
  • payments for providers and employers (Stripe);
  • AI service providers (Anthropic) to read documents you upload, such as price lists and verification documents. They don't use them to train models.

Retention

  • Device security profiles: about 2 days. Security logs: 30 days. Daily unique-visitor hashes: 2 days.
  • Analytics counts: up to 13 months. They are aggregate totals with no personal information.
  • Provider account records: while the account is active and for up to 3 years afterwards, for security and audit.
  • Contact messages: up to 12 months.

Security

We use encryption in transit, encryption for sensitive stored data, role-based access with two-step sign-in for accounts, and audit logs.

Your choices and rights

You can clear cookies in your browser at any time. Depending on where you live (for example California, Colorado, Connecticut, Virginia and other states with privacy laws), you may have the right to:

  • know what personal information we hold about you;
  • get a copy of it;
  • have it corrected or deleted;
  • opt out of any sale, sharing or targeted advertising (we do none of these);
  • appeal a decision we make about your request.

To make a request, use our privacy request form, email [email protected], or use our contact page and choose "Privacy request". We will verify your request in a way that fits the information involved, and we won't discriminate against you for using your rights.

Children

ClearProviders is not directed to children under 13, and we don't knowingly collect their information.

Changes

We will post changes to this policy on this page and update the date above.

Contact

Kitzer, LLC, 82 Nassau St #60540, New York, NY 10038. Email [email protected], or use our contact page and choose "Privacy request".