The fine print, in plain terms.

What we collect and why

Tether processes protected health information solely to provide referral coordination on behalf of the practices we serve. We act as a business associate under HIPAA, not as a data broker. We do not sell personal or health information, and we do not use it for advertising.

Information we handle

• Patient demographics, insurance, and clinical detail contained in referrals, processed only to route and track those referrals.
• Practice and user account information needed to operate the service.
• Usage and audit data, logged to keep the platform secure and accountable.

How long we keep it

Referral data is retained to meet healthcare record requirements. Practices may request export or deletion at any time, subject to those requirements; deletion is verified and logged.

Questions: support@tetherhealth.co

Using Tether

By using Tether, a practice agrees to these terms and to the Business Associate Agreement executed before any PHI is processed. The service is provided to licensed healthcare practices and their authorized staff.

Your responsibilities

• Keep account credentials secure and limit access to authorized staff.
• Use the platform in compliance with applicable healthcare and privacy law.
• Ensure the clinical accuracy of referrals before they are sent; Tether assists with drafting and coordination but does not practice medicine.

Availability and changes

We work to keep Tether available and secure, and will give reasonable notice of material changes to these terms. Continued use after an update constitutes acceptance.

Your rights and our role

Tether operates as a business associate to the covered entities (practices) that use the platform. We process PHI only as permitted by our Business Associate Agreement and by law.

How we safeguard PHI

• Encryption at rest (AES-256) and in transit (TLS 1.2+), with practice-level data isolation.
• Minimum-necessary, role-based access, and immutable audit logging retained at least six years.
• A documented incident-response plan with breach-notification timelines compliant with HIPAA.

Patients should direct requests about their records to their practice, which is the covered entity. Practices can reach our team for any compliance matter, including BAA review and subprocessor lists.

Compliance contact: support@tetherhealth.co