Consumer Health Data Privacy Policy
Effective October 24, 2026
This policy describes how Carson Bates, doing business as Anchorpoint Medical Evidence ("Anchorpoint," "we," "us"), collects, uses, and shares consumer health data covered by Washington's My Health My Data Act. It applies to non-exempt information that is linked or reasonably linkable to you and that identifies, or lets someone infer, your physical or mental health.
Consumer health data we collect and why
| Category | Purpose |
|---|---|
| Identity and contact information linked to a health-related service request, including name, email, contact preferences, and representative permissions | To communicate about your requested service, verify identity and permitted access, and manage your case |
| The fact that you asked about or bought a Nexus Check or a nexus letter, with related payment and refund status | To provide your requested service, match payment to your case, and handle refunds and payment questions |
| Medical, service, and claim records you submit, including diagnoses, symptoms, histories, and supporting statements | To review the evidence for your requested service |
| Health information we derive in chronologies, evidence maps, citations, reports, and proposed letters | To prepare and check your requested analysis and, if you request a letter, support independent clinician review |
| Health-related support and readiness messages, and your instructions | To coordinate your review and answer case questions |
| Website and access information that could reveal use of a health-related service | To deliver and secure your requested service and investigate technical problems or misuse |
Sources
We collect consumer health data from you, a person you authorize, the records you choose to submit, an assigned clinician, service providers that support your transaction, and our analysis of your submitted material.
Consumer health data we share and who receives it
| Data shared | Recipient category and purpose |
|---|---|
| Case documents, messages, and derived analysis needed for your requested service | Cloud storage, email, document, and AI tools within Google Workspace (including Ask Gemini in Google Drive when used for a case), to store, organize, process, and deliver the work |
| Name, contact details, and booking details for a free call, which may reveal a health-related interest | Scheduling service (Cal.com), to schedule and hold the call you request |
| Purchaser, contact, and transaction details that may reveal a health-related purchase | Payment processor (Stripe), for payments, refunds, and payment support |
| Website request information that may reveal use of a health-related service | Website hosting and font providers (Vercel, Google Fonts), to deliver the website; Vercel Web Analytics also counts page visits and site actions without cookies and never records form answers |
| Website request information that may reveal use of a health-related service | Website analytics provider (Microsoft): On most pages we use Microsoft Clarity to see where visitors scroll and tap, so we can fix confusing parts of the site. It hides everything you type and all page text, sets no cookies, and never runs on the records-folder page or the page after payment. Microsoft receives the page address and general browser and device details. |
| Records and derived work needed for an optional nexus letter | The independent licensed clinician assigned to your letter, only with your separate permission |
| The data within your specific permission | Your authorized representative, to carry out your instructions |
| Information required by a legal obligation | The legally authorized recipient, for that obligation |
Before we share your records with a clinician, we ask for your permission with its own checkbox when you upload. You can skip it and still get your Nexus Check. If you later order a letter, we ask again before we assign a clinician.
If you text our business number, (360) 347-2563, for any reason, our messaging provider (Spruce Health) and mobile carriers handle your phone number and messages so we can receive them. A status message may reveal that you use a health-related service. Do not send records or medical details by text or ordinary email.
Affiliates that receive consumer health data: None.
We do not sell consumer health data.
Optional purchase measurement and separate sharing
Asking about or buying our service can reveal a health-related interest. We do not currently offer optional purchase measurement. Nexus letter payments are made through a Stripe payment link we email to you after your report, and we do not connect an advertising source code to those payments or share them with Google Ads. If we offer purchase measurement in the future, we will ask for your separate consent first, update this policy before we collect anything, and keep it off unless you choose it.
Google click ID with a sign-up: If you tick the box on the sign-up form that lets Google Ads know your visit led to a sign-up, we keep the Google click ID from your visit's address with your sign-up record and for that browser session, and the site tells Google Ads that a sign-up happened. We record no health information with the click ID, and your answers are never sent to Google. If you leave the box unticked, we keep no click ID and tell Google nothing about the sign-up.
Google click ID with a call request: A link from a Google ad carries a click ID, a random code Google adds to the page address. This site keeps it in your browser for up to 90 days. If you request a call, we include it with your request so we can see which ads lead to calls. It holds no name or health information, and this feature does not send it to Google Ads.
Next steps by email: If you ask for next steps by email after the readiness check, we keep your email address and your answer to “Where are you?” (the VA denied your claim, or you haven’t filed yet) to send those emails. Your readiness answers are not sent. You can unsubscribe at any time.
For a standalone Nexus Check, we keep the case records and report that we control for 90 calendar days after report delivery, then remove report access and delete those case files, unless a specific legal obligation or exception applies. You may request earlier deletion. When you upload from a Google Account to our private intake folder, you own those originals; deleting our copies does not delete yours. We delete case conversations in Ask Gemini in Google Drive after the checked report is delivered. Purchase and refund records are kept on a separate business-record schedule without medical details.
Your rights and how to use them
You may ask us to:
- confirm whether we collect, share, or sell your consumer health data;
- give you access to that data and a list of the third parties and affiliates we shared it with, with their contact information;
- withdraw your consent;
- delete your consumer health data; and
- reconsider a refusal, through an appeal.
Email info@anchorpointmedicalevidence.com with the subject Privacy request or Privacy appeal. You do not need an account. Do not attach medical records; we will arrange a secure route if one is needed. We may ask for reasonable information to verify your identity.
We respond within 45 days. If we need more time, we tell you and may extend once by up to 45 more days. We decide an appeal in writing within 45 days. If we deny your appeal, we explain how to contact the Washington Attorney General. Requests are free up to twice a year, except where the law allows otherwise for requests that are clearly unfounded, excessive, or repetitive.
When we delete data at your request, we also tell the processors and third parties that received it. Copies in backups or archives may take up to six months to delete, as the law allows. Information exempt from this Act is handled under the rules that apply to it.