We do not require Business Associate Agreements (BAA) because we are not a covered entity under HIPAA, nor does our advertising service fall under the scope of HIPAA-related activities. We worked closely with a HIPAA-focused legal team to make sure our system was fully HIPAA-compliant. Even though we are not a covered entity under the law, we went above and beyond to ensure extra protections for clients and clinicians using our service.
When someone emails you through Mental Health Match, that email passes through an encrypted server and the data is immediately deleted from our database. You can use our service as long as your email is HIPAA compliant.