Privacy policy
Last updated: September 4, 2026
The short version
- We collect as little as possible, and no patient details.
- We never sell your information or share it for advertising.
- Accounts are for adults only. We don’t knowingly collect anything from children.
- We are not a medical provider and we don’t store medical records.
- We are not a HIPAA covered entity or business associate. See our security and compliance page.
- Email us and we’ll delete your data.
What we collect
From patients and families: your email address; a ZIP code if you choose to share one; providers you save; searches you run (specialty, ZIP, filters, never tied to your name); structured experience answers you submit; and anything you type into our forms. We ask you not to include the patient’s name, diagnosis, medications, or other medical details anywhere on this site, and we remove them from published content when we see them.
From providers: business information from public records (the NPPES registry and similar), plus whatever a practice submits when claiming or updating its profile.
Automatically: basic technical logs (IP address, browser type, errors) used only to operate and secure the service. A sign-in cookie keeps you signed in for 30 days. We do not use advertising trackers.
With your permission, we set one random, anonymous cookie that lasts until you close your browser. It lets us see that a search led to a profile view, so we know the directory is helping. It is never linked to your name, email, or account. If you arrived from a link with a source tag, or from another site, we record that source with anything you submit. Neither follows you to other sites.
We use Cloudflare Web Analytics to count page views. It sets no cookies, does not fingerprint your device, and cannot follow you to other sites. We see how many people read a page, not who they are.
If you tap “Use my location”, your coordinates are used once to find the nearest ZIP code, and are not stored. Map tiles come from our own servers, so opening the map tells no other company where you are looking.
Health-related data
Searches, saved providers, and experience answers say something about health, and several state laws treat them that way. They have their own policy page, including the consent choice for the anonymous counting cookie.
What we do with it
We use your information to run the directory: sending sign-in links, showing your saved providers, relaying contact requests you ask us to relay, moderating and publishing experiences (anonymously), improving search, and emailing you things you signed up for. Marketing and update emails include a way to opt out. Account emails, like sign-in links, arrive only when you request them.
What we never do
- Sell your personal information.
- Share your health-related searches or activity with advertisers, ever.
- Publish your name with an experience you share (they appear as “a patient”, “a parent”, or “a caregiver”).
- Create accounts for, or knowingly collect information from, children under 13. This service is directed to adults.
Who we share with
Service providers that run our infrastructure (hosting, email delivery, payments for provider subscriptions), under contracts limiting their use of your data; a practice, when you explicitly ask us to send them your contact request; and authorities if the law genuinely requires it.
Retention and deletion
We keep account data while your account is active. Search and page-view events are deleted after 18 months. Thirty days after you send a contact request, we remove your name, email, insurance and note from it. An anonymous record that a request was made stays with the listing. Email privacy@autismfriendlycare.com to access or delete your data; we’ll respond within 30 days. Published experiences may remain in anonymized form after account deletion.
Security and breach notice
Data is encrypted in transit and at rest with our infrastructure providers. No system is perfect; if a breach affects your personal information, we will notify you as required by applicable law, including the FTC’s Health Breach Notification Rule where it applies.
Changes and contact
This site is operated by Autism Friendly Care LLC. We’ll post changes here with a new date, and email you about material changes. Questions: privacy@autismfriendlycare.com.