Security, in plain English

You're trusting us with your patients' contact information. Here is exactly how we treat it — no badges, no buzzwords, no claims we can't back up.

Minimum-necessary data, by design

Our list upload has exactly four fields: name, phone, email, and last visit date. There is literally nowhere to put clinical, treatment, diagnosis, or billing information — so it can never end up in our systems, even by accident.

Encrypted in transit and at rest

Every connection to our systems uses TLS, and stored data is encrypted at rest. Contact lists are never emailed around, exported to spreadsheets on laptops, or copied outside our platform.

Role-based access control

Access to your list is limited to the people who need it to make calls for your practice — nobody else. Every account is individually credentialed; there are no shared logins.

Per-practice isolation

Each practice's data is isolated with row-level separation. Your list is never mixed with, visible to, or reachable from any other client's account.

Deletion on request

Ask, and your list is deleted — no exit process, no retention games. Email angeldavila@floridacontacts.com and it's done.

Weekly off-site backups

Encrypted backups are taken weekly and stored off-site, so a hardware failure never means losing track of who asked not to be called again.

A word about HIPAA

You will not find a "HIPAA certified" badge on this site, because no such certification exists, and we won't pretend otherwise. We are not a covered entity's software vendor claiming HIPAA certification — our approach is simpler and, we'd argue, safer: we deliberately never receive clinical information. Contact fields only — encrypted in transit and at rest, access-controlled, isolated per practice, and deleted on request. If a vendor tells you they're "HIPAA certified," ask them who issued the certificate.

Questions about any of this? Email angeldavila@floridacontacts.com and you'll get an answer from the owner, not a compliance inbox.

Comfortable with how we handle data?

Then the next step is a 15-minute call about your list.