Privacy policy
Last updated November 10, 2026
Elastic EHR is a software platform operated by NurtureWell LLC ("we", "us"). Healthcare practices ("practices") use it to keep patient records, schedule visits, bill, and contact their patients. This policy explains how we handle information on this website and through the platform.
Who is responsible for patient information
A practice decides what it records about its patients and why. When we process patient health information for a practice, we do so as that practice's service provider and under our agreement with it. Where the practice is a covered entity under HIPAA, that agreement is a business associate agreement. For questions about your own health record, contact your practice first. Your practice's own notice of privacy practices explains your rights over that record.
Information we handle
- Patient and guardian information that a practice enters: names, contact details, dates of birth, insurance details, appointments, clinical notes and documents.
- Account information for people who use the platform on behalf of a practice: name, work email, role and sign-in records.
- Usage and audit records: who opened or changed a record, when, and from what network address. These protect patients and help us find misuse.
- Website information: this site is informational. We do not use advertising trackers on it.
How we use it
- To run the platform for the practice that entered the information.
- To send messages the practice has asked us to send for it, such as appointment reminders.
- To keep the platform secure, find problems and keep audit records.
- To meet legal duties.
We do not sell personal information. We do not use patient information for advertising.
Text messages
Practices can use Elastic EHR to send appointment reminder texts to patients and guardians who chose to get them. See the text message program page for how people opt in and out.
We do not share mobile phone numbers or text message opt-in information with third parties or affiliates for their marketing or promotional purposes. We pass phone numbers only to the service providers that deliver the messages for us, such as our messaging and phone carrier partners, and only to deliver those messages.
Who else sees information
We share information only with: the practice it belongs to; service providers that help us run the platform (hosting, email and text delivery, payment and insurance claim processing) under written terms that limit their use; and authorities where the law requires it.
Security and retention
Data is encrypted in transit and at rest, access is limited by role and recorded, and access by our own staff to patient records is restricted and logged. A practice sets how long its records are kept, subject to the law. When a practice leaves, we return or delete its data as our agreement with it says.
Your choices
- To stop text messages, reply STOP to any message.
- To see, correct or get a copy of your health record, ask your practice.
- For questions about this policy or to ask about information we hold as a website operator, write to us below.
Children
Practices may record information about children. That information is entered and managed by the practice, and a parent or guardian deals with the practice about it. This website is not directed at children.
Changes
If we change this policy we will post the new version here and update the date above.
Contact
NurtureWell LLC, operator of Elastic EHR
privacy@elasticehr.com