Legal

Privacy Policy

Effective Date January 7, 2026
Last Updated January 7, 2026

Thank you for choosing Sahara. We are committed to protecting your privacy and maintaining the security of any personal information and Protected Health Information (PHI) shared with us through our clinical note-taking and OASIS form assistance system (the "Service").

This Privacy Policy explains how we collect, use, share, and protect your information in compliance with applicable laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Section 01

Information We Collect

We collect two categories of information to operate and improve the Service.

Clinician Information
Name, email, and practice details for account setup and support.
Usage data (e.g., login times, feature usage) for product improvement.
Patient Information (PHI)
Clinical notes taken by the clinician during patient encounters.
OASIS form fields and any accompanying data relevant to patient care.
Section 02

How We Use the Information

To assist clinicians in documenting visits and completing OASIS forms.
To improve the accuracy and relevance of AI-powered coding or assistance.
To provide secure access, support, and updates to the system.
To comply with legal and regulatory obligations.
Section 03

HIPAA Compliance and Data Security

We are fully committed to HIPAA compliance. The following technical and administrative safeguards are in place:

Encryption
All data is encrypted in transit and at rest using industry-standard protocols.
Access Controls
Only authorized users can access PHI. Strict authentication is enforced at every layer.
Audit Logging
All system access and interactions with PHI are logged for compliance and traceability.
BAAs Available
We offer Business Associate Agreements to all covered entities using our service.
Section 04

Data Sharing

We do not sell or share your data or your patients' data with third parties for marketing purposes.

We may share data only in the following circumstances:

With your explicit consent.
With trusted subprocessors under strict data protection agreements.
As required by law or to comply with a valid court order.
Section 05

Your Rights

As a clinician using Sahara, you have the following rights regarding your data:

Access and update your account information at any time.
Request deletion of your account and all associated data.
Contact us regarding any concerns about data usage or regulatory compliance.
Section 06

Data Retention

We retain clinician and patient data only as long as necessary to provide our services and meet legal obligations. You may request data deletion at any time, and we will process such requests in compliance with HIPAA guidelines.

Section 07

Third-Party Services

If you integrate our system with third-party services (such as EHR/EMR systems), you are responsible for ensuring those systems comply with applicable privacy and security standards. Sahara is not liable for the data practices of third-party integrations outside our direct control.

Section 08

Children's Privacy

Our services are intended exclusively for licensed healthcare professionals. We do not knowingly collect information directly from individuals under the age of 18.

Section 09

Changes to This Policy

We may update this Privacy Policy from time to time as our services or legal requirements evolve. When we do, we will notify users via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

Section 10

Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out:

Our team takes privacy inquiries seriously. We aim to respond to all data-related requests within 48 hours.

Sahara Health, Inc.
1606 Headway Cir STE 9501, Austin, TX 78754