Privacy Policy
Effective date: September 23, 2026 · SaRA Health, Inc.
Who we are
SaRA Health, Inc. ("SaRA Health", "we", "us") provides software that helps physical and occupational therapy clinics support patients between visits, including remote therapeutic monitoring and secure messaging. This policy describes how we handle information collected through our websites and our services, including our text-messaging program.
Health information and HIPAA
When we process patient information on behalf of a clinic, we generally do so as a "business associate" under the Health Insurance Portability and Accountability Act (HIPAA), pursuant to business associate agreements with the clinics we serve. Protected health information is used and disclosed only as permitted by those agreements and by law. Your healthcare provider's own notice of privacy practices governs their use of your health information.
Information we collect
- From clinics and providers: account and contact details for clinic staff, and the patient information a clinic supplies or generates in the course of care (for example contact information, care plans, exercise responses, and messages).
- From patients using our messaging: the phone number your provider enrolled, your replies, and media you choose to send to your care team.
- From website visitors: usage information collected through standard analytics tools, and anything you submit through our forms.
How we use information
- To provide, secure, and improve our services for clinics and their patients.
- To send and receive the care-related messages described below.
- To communicate with clinics about their accounts.
- To meet our legal and contractual obligations.
We do not sell personal information.
Text messaging (SMS/MMS) program
Patients are enrolled in SaRA Health text messaging by their care team: you agree to receive care texts when you give your mobile number to your provider during onboarding, and your first text repeats the program notice: message frequency, data rates, and how to reply STOP. Messages support your plan of care -- for example exercise check-ins, care-team messages, and secure links to view or record media -- and message frequency varies with your care.
- Reply STOP at any time to unsubscribe, and START to resubscribe.
- Reply HELP for help. Message and data rates may apply.
- Mobile phone numbers and text-messaging originator opt-in data and consent are not shared with, or sold to, any third parties or affiliates for marketing or promotional purposes.
How we share information
We share information only with: (a) the clinic and care team responsible for your care; (b) service providers that process data on our behalf under contracts restricting their use of it (for example hosting, messaging delivery, and analytics vendors); and (c) authorities where required by law. We do not share personal information with third parties for their own marketing.
Security and retention
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle, including encryption in transit and at rest for patient data. We retain information for as long as needed to provide the services and to meet legal, contractual, and clinical-record obligations, after which it is deleted or de-identified.
Your choices
You can opt out of text messages at any time (reply STOP). For access, correction, or deletion requests concerning information we process for your clinic, contact your provider -- we support clinics in fulfilling those requests. For questions about this policy or our site practices, contact us at support@sarahealth.com.
Children
Our services are used in the course of care that may include minors under the direction of their providers and guardians; our websites are not directed to children, and we do not knowingly collect information from children outside that care context.
Changes to this policy
If we make material changes, we will update this page and the effective date above.