Privacy Policy
Effective date: October 1, 2026
This Privacy Policy describes how Verified Injector LLC ("Verified Injector," "we," "us," or "our") collects, uses, shares, and protects information in connection with verifiedinjector.com and its related feeds, badges, and services (together, the "Service").
Three different kinds of information are covered here, and they are treated very differently: information about visitors to the Service, information about business representatives who open an account, and professional information we publish about clinics and the clinicians they publicly name. Each is addressed in its own section below.
1. Who We Are and Scope
Verified Injector LLC operates the Service and decides what information is collected and why. This Policy applies to information collected through the Service, through email and other communications with us, and from public and authorized sources for directory and verification purposes. It does not apply to the websites of clinics, licensing boards, or other third parties that we link to; those sites have their own privacy practices.
Verified Injector is a provider directory and verification service. It is not a healthcare provider and does not provide medical services.
2. Information We Collect
2.1 Information collected automatically. When you visit the Service, our hosting and infrastructure providers receive the technical information that accompanies any web request, such as your IP address, browser type, device information, operating system, referring page, the pages you request, and timestamps. This information is used to deliver pages, maintain security, and resist abuse. If you accept analytics cookies, we also collect the analytics information described in Section 5.
2.2 Account information. If a business representative opens an account, we collect the name, email address, and (optionally) phone number provided, together with authentication credentials. Passwords are handled by our authentication provider in hashed form. If you enable two-factor authentication, we store the shared secret used by your authenticator application.
2.3 Claim records. When you claim a listing, we record which listing was claimed, the domain of the email address used, the domain we hold for that business, any evidence you provide, and the decision made and the reason for it.
2.4 Submitted content. We collect the hours, descriptions, service lists, photographs, and other materials that account holders submit to a listing, including unpublished submissions and the values they replaced.
2.5 Billing and subscription information. If you purchase a badge subscription, our payment processor collects your payment card details and billing information. We receive confirmation of payment, the billing name and email, and subscription status. We do not store payment card numbers or other card details.
2.6 Communications. If you write to us, submit a correction request, or report an error, we keep the message and our response so that we can act on it and show our reasoning if a correction is later questioned.
2.7 Marketing consent records. If you opt in to marketing email or text messages, we record which option you selected, the address or number it applies to, the date, and the version of the wording shown to you at the time.
2.8 Public and professional information. We collect professional, licensing, business, and clinician information from public and authorized sources as described in Section 3.
3. Public and Professional Directory Information
3.1 What we publish and where it comes from. The Service organizes professional and business information from clinic websites, state licensing board records, the federal NPI Registry maintained by the Centers for Medicare & Medicaid Services, open business datasets (Overture Maps Foundation and Foursquare), and information provided by clinics themselves. Where a clinician appears on the Service, the information comes from two kinds of public source: the clinician's employer's own website, and the register of the licensing board that issued the license.
3.2 The fields we publish. For a clinician, we publish professional facts only: name, the credential and role stated by the employing clinic, license status and expiration as recorded by the issuing board, NPI and taxonomy as identity information, and the source and date of each fact. For a business, we publish its name, location, website, hours, services, and the verification record.
3.3 What we do not publish. We do not publish home addresses, dates of birth, or personal contact details, even where a public file contains them. Licensing registers often list a licensee's home as their address of record; we never treat an address in a register as a fact about where someone works and we never republish it. We do not publish adverse findings drawn from cached bulk files; our Methodology explains why.
3.4 Why this information may remain public. Because this information concerns professional and business activity and is drawn from government records and from information that clinics have made available to the general public, it is generally treated as publicly available information under applicable privacy laws. Portions of it may remain publicly displayed on the Service even if a person also holds an account with us, and a listing remains in the directory whether or not it has been claimed.
3.5 Corrections and removal. We provide free correction and review processes for inaccurate information. See Section 11.
4. How We Use Information
We use the information described above to:
- operate, maintain, secure, and improve the Service;
- build and maintain the directory and verification records, and recheck them as licensing registers are refreshed;
- create and administer accounts, review listing claims, and moderate submitted content;
- process badge subscriptions, payments, renewals, and cancellations, and send transactional messages about them;
- respond to correction requests, error reports, privacy requests, and other communications;
- send marketing communications, only where you have opted in;
- understand how visitors use the Service, only where you have accepted analytics cookies;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- comply with legal obligations and enforce our Terms of Use; and
- maintain records of decisions, consents, and published changes so that we can demonstrate what we did and why.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use information collected through the Service to train artificial intelligence models, and we do not permit our service providers to do so.
5. Analytics and Cookies
5.1 Google Analytics. We use Google Analytics 4 to understand how visitors use the Service and to improve it. Google Analytics is not loaded until you accept analytics cookies through our cookie banner. If you reject analytics cookies, Google Analytics does not load and no analytics data from your visit is sent to Google.
When you accept, Google Analytics may collect information such as the pages you view, your interactions with the Service, session information, approximate geographic location, browser and device information, and a pseudonymous identifier stored in a first-party cookie. We do not intentionally send your name, email address, phone number, account identifiers, or other information that directly identifies you to Google Analytics. Google may use your IP address at the time of collection to derive approximate location; Google states that it does not log or store IP addresses in Google Analytics 4.
Google processes analytics information on our behalf under its applicable terms. For information about how Google uses data from sites that use its services, see How Google uses information from sites or apps that use our services. We have not enabled Google Signals, advertising personalization, remarketing, or linking to Google Ads, and we do not use Google Analytics to sell personal information or for cross-site behavioral advertising. User-level and event-level analytics data are retained by Google Analytics for 2 months, after which they are deleted automatically; aggregated reports may be retained longer.
5.2 Changing your choice. You can change your analytics cookie preference at any time through the Cookie Preferences control on the Service. You can also install Google's browser add-on to block Google Analytics on all sites.
5.3 Other cookies. If you sign in, we set session cookies that keep you signed in and are used for nothing else. We record your cookie banner choice so that we do not ask you again on every page. We embed no advertising networks, social media plugins, or cross-site tracking technologies.
5.4 Opt-out preference signals. Because we do not sell or share personal information, there is no sale or sharing to opt out of. We treat a Global Privacy Control signal as an indication that you do not wish to be tracked; where our systems support it, we honor that signal by treating it as a rejection of analytics cookies.
6. Service Providers
We use service providers to operate the Service. Depending on the feature you use, these providers may support hosting and content delivery, database and authentication services, email delivery, payment processing, analytics, security, and automated content review. They process information on our behalf only as needed to provide those services, under contracts that restrict their use of the information, or as otherwise permitted by their agreements and applicable law. Our current providers include:
| Function | Provider |
|---|---|
| Hosting and content delivery | Vercel |
| Database and authentication | Supabase |
| Transactional and account email | Resend |
| Payment processing | Stripe |
| Web analytics (with consent) | Google Analytics |
| Automated content review | Anthropic |
We may add or change providers as our systems evolve and will update this Policy when the categories of providers change.
Automated content review. Text that account holders submit to a listing may be sent to Anthropic's API for an automated check against a fixed set of rules (no contact details, no medical or outcome claims, no text addressed to an automated system rather than a reader). Anthropic processes the text to answer that question under its commercial API terms, which do not permit it to train models on that content. Anything the automated check flags is reviewed by a person before a decision is made; nothing is rejected on the basis of the automated check alone, and the decision and its reason are recorded. Photographs are reviewed by a person before they are published. Hours and services are published without prior review and may be removed afterward.
7. Payments and Subscriptions
Badge subscription payments are processed by Stripe. When you subscribe, you provide your payment details directly to Stripe, whose use of that information is governed by Stripe's privacy policy. We receive the information described in Section 2.5 and use it to manage your subscription, send renewal reminders and receipts, handle failed or disputed payments, and comply with tax and accounting obligations. Payment does not influence verification status or findings.
8. How Information Is Shared
We share information only in the following circumstances:
- Publicly, by design. Directory and verification information described in Section 3, and published listing content submitted by account holders, are public.
- With service providers, as described in Section 6.
- With licensing boards and data sources, where necessary to verify a record or resolve a correction request, and only the professional information at issue.
- For legal reasons, where we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of Verified Injector, our users, or the public, or to enforce our Terms of Use.
- In a business transfer, if Verified Injector is involved in a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred as part of that transaction, subject to this Policy.
- With your direction or consent.
We do not sell personal information, and we do not share it with data brokers, advertising networks, or for cross-context behavioral advertising. We do not offer clinics per-listing visitor analytics, lead capture, or any data about who viewed their listing.
9. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Policy, including operating and improving the directory, maintaining verification records and audit history, providing accounts and subscriptions, resolving disputes, preventing fraud or abuse, enforcing agreements, and complying with legal obligations. Different categories are retained for different periods:
| Category | Retention |
|---|---|
| Account data (name, email, phone, credentials, two-factor secret) | While the account exists. Deleting the account deletes it. |
| Claim records and the log of published changes | For as long as the listing exists, because a directory that publishes its evidence must be able to produce it afterward. |
| Published listing content | Remains on the listing, including after the submitting account is closed, subject to our corrections and removal process. |
| Unpublished submissions | Deleted when the account is deleted. |
| Marketing consent and opt-out records | Retained after account deletion for the period required to demonstrate consent under applicable law (currently up to five years after the last message sent), and used only to prove what was agreed, never to decide whether to send. |
| Billing records | For the period required by tax and accounting law, generally seven years. |
| Correspondence and correction requests | For as long as the related record exists, plus a reasonable period for dispute resolution. |
| Analytics data | 2 months at the user and event level in Google Analytics, as described in Section 5. |
| Server logs | Retained by our hosting provider for its standard retention window and not copied elsewhere by us. |
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted connections, hashed credentials handled by a dedicated authentication provider, optional two-factor authentication, access controls, and re-encoding of uploaded images so that embedded metadata such as location data is not stored. We rely on specialized service providers for authentication, hosting, storage, database services, payment processing, email delivery, content review, and analytics. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us at info@verifiedinjector.com.
11. Your Privacy Rights and Choices
11.1 If you are a clinician or business named on the Service. You may ask us to correct any inaccurate professional information about you at any time, free of charge, through Report an Error or by email to info@verifiedinjector.com. We do not require proof of identity before we review a correction request. You may also ask us to review or remove a record. Because directory information is drawn from public and authorized sources and concerns professional activity, a request does not always require removal of accurate public information, but we consider every request in good faith, and we will tell you what we decided and why. Our Terms of Use describe the corrections and removal process in more detail.
11.2 If you hold an account. You can review and update your account details, manage your marketing preferences, manage your subscription, and delete your account from your account settings. The account deletion screen lists exactly what will be deleted and what will be retained before anything happens; the answer matches Section 9.
11.3 Marketing choices. Marketing email and marketing text messages are separate opt-ins. Both are off by default, neither is required for any feature, and you can turn either off at any time in your marketing preferences. When we send marketing email, every message will include a one-click unsubscribe link, and any text message we send can be stopped by replying STOP. Messages about your own account, claim, listing, or subscription are not marketing and are sent regardless of your marketing choices.
11.4 Rights under state privacy laws. Depending on where you live, you may have the right to request access to the personal information we hold about you, to request its correction or deletion, to obtain a portable copy, to opt out of certain processing, to appeal a decision we make on a request, and to lodge a complaint with your state's attorney general or privacy regulator. Certain rights do not apply to information we maintain for directory, public-record, legal, security, fraud-prevention, or other permitted purposes, or to publicly available information. To exercise a right, email info@verifiedinjector.com with "Privacy Request" in the subject line. We may take reasonable steps to verify your identity and, if you are acting through an authorized agent, the agent's authority, before completing a request. We will not discriminate against you for exercising your rights. We will respond within the time required by applicable law, generally within 45 days.
11.5 Sensitive information. We do not collect or process sensitive personal information (such as health, biometric, precise geolocation, or government identification data) through the Service, and we do not sell any personal information.
12. Patient and Health Information
Verified Injector is a provider directory and verification service. We do not intentionally collect patient medical records, treatment records, appointment information, or protected health information, and there is no feature of the Service designed to receive it. Please do not send medical records or health information to us. If a visitor voluntarily includes such information in an email or other communication, we may receive and process it as part of responding to that communication, and we will delete it once it is no longer needed for that purpose. Account holders are prohibited from submitting any information about identifiable patients to a listing.
13. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 in circumstances requiring deletion, we will take appropriate steps to remove it. If you believe a child has provided us with personal information, contact us at info@verifiedinjector.com.
14. Third-Party Links
The Service links to clinic websites, state licensing board registers, the NPI Registry, payment processor pages, and other third-party sites. We are not responsible for the privacy practices of those sites, and this Policy does not apply to them. We encourage you to review their privacy policies.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time as our services, technology, vendors, and legal obligations change. We will post the revised Policy on this page and update the effective date at the top. If a change materially reduces your rights or materially changes how we use information already collected, we will provide additional notice (such as by email to account holders or a notice on the Service) and, where required by law, obtain your consent before the change applies.
16. Contact Us
Questions, privacy requests, and correction requests may be sent to:
Verified Injector LLC, an Arizona limited liability company
11000 N. Scottsdale Road, Suite 100
Scottsdale, AZ 85254
Email: info@verifiedinjector.com
Corrections and error reports: Report an Error