Privacy Policy

1. Who we are

ABA Care Network™ ("we," "us," "our") operates abacarenetwork.com, a directory that helps families find Applied Behavior Analysis ("ABA") providers in their area.

We are not a healthcare provider. We do not deliver ABA therapy, diagnose any condition, provide medical advice, or supervise the providers listed in our directory. We are a referral and information service. Any clinical relationship you form is with the provider, not with us.

Because we are not a covered entity or, in most circumstances, a business associate under HIPAA, HIPAA generally does not govern the information we collect. Other laws do, including the Federal Trade Commission Act, state consumer-protection and health-privacy laws, and — where applicable — the Children's Online Privacy Protection Act. This policy describes our practices under those laws.

2. Information we collect

Information you give us. When you use our matching service or interest forms we may ask for:

• Your name
• Your email address and/or phone number
• Your city, state, or ZIP code
• The insurance carrier you plan to use, if you volunteer it
• Preferred contact time or language, if you volunteer it
• If you use the matching quiz: your child's broad age range (for example, "2–5 years"), whether your child has an ASD diagnosis (yes, no, or in progress), your care-setting preference, and your availability

Health-related screening answers. The matching quiz asks for an age range and a diagnosis status because most insurers require an ASD diagnosis to cover ABA, and providers need to know whether they serve your child's age group. We treat those answers — and the fact that you are searching for ABA services at all — as consumer health data (see Section 9), and we share them only as described in Section 7.

We do not ask for, and you should not send us, clinical records, evaluations, treatment history, or medical documentation — for yourself or for anyone else, including a child. If you send us clinical documents anyway, we will delete them when we identify them.

Information collected automatically. When you visit our site we and our service providers collect standard technical data: IP address, browser and device type, pages viewed, referring URL, and timestamps. See Section 5 for how this is used and limited.

Information from providers. Providers listed in our directory supply their own practice information, credentials, service areas, and availability, or that information is compiled from the public sources described in Section 4.

3. Information about children

Our services are directed to parents, guardians, and adult caregivers. They are not directed to children, and we do not knowingly collect personal information from anyone under 13.

We recognize that a person seeking an ABA provider is usually doing so on behalf of a child. Our intake is designed so that the child is never identified: we ask at most for a broad age range and a yes/no diagnosis status (see Section 2) — never a child's name, date of birth, school, or any clinical detail. If you believe a child has submitted personal information to us, contact us at [email protected] and we will delete it.

4. Directory data sources

Provider and directory information may come from public sources (including the federal NPPES/NPI Registry, U.S. Census geocoding, the BACB certificant registry, state licensing boards, insurance-carrier plan documents, and state Medicaid directories), from providers themselves, from user-submitted corrections, from automated processing, or from editorial research. Directory data is used to operate, update, rank, display, and improve the website. Every listing is intended to trace back to a public record a family can verify independently.

5. Advertising and analytics

We use privacy-conscious analytics to understand general site usage. Where we use advertising or measurement tags (for example, a Meta or TikTok pixel), they operate under all of the following rules:

• Never on care-seeking surfaces. Advertising tags do not load on the provider directory, provider or clinic profile pages, comparison pages, the matching quiz or screeners, intake or booking forms, confirmation pages, or the family care tracker.
• Only with your consent. On the pages where tags may run — educational articles and guides, and our careers, provider-recruitment, "claim your listing," and general corporate pages — they load only after you affirmatively accept them in our consent banner. Declining never limits your use of the site.
• Not in consumer-health-data states. Advertising tags are suppressed entirely for visitors we identify as located in Washington, Nevada, or Connecticut.
• Minimum data. We strip query strings, do not enable automatic advanced matching, and do not send form values, ZIP codes, email addresses, insurance selections, diagnosis information, or any event indicating that a family started or completed a request.

We do not upload lists of families who contacted us to any advertising platform as a custom or suppression audience, and we do not use "someone submitted our form" as an advertising signal. We honor the Global Privacy Control browser signal as an opt-out of targeted advertising where required by law. As of the last-updated date above, no advertising tag is live; this section describes the rules any future tag must follow.

Do Not Track and Global Privacy Control. Our site does not currently rely on browser Do Not Track signals for enforcement. We honor Global Privacy Control signals as opt-out requests where required by law.

6. Marketing communications

Service communications. When you submit a match request, a care advisor may follow up by call, text, or email about that request — including checking whether a provider responded, suggesting alternatives, and telling you about ABA services ABA Care Network itself offers where relevant to your search. These are service communications tied to your request, covered by the consent you give at submission, and you can stop them at any time by replying "stop" or emailing us.

Marketing. Separately, if you opt in to updates (always an unchecked box or an explicit yes — never pre-checked), we will email you about ABA resources, provider availability, and our own services. That opt-in is never required to use the matching service. You can withdraw it at any time using the unsubscribe link in any message or by emailing [email protected].

We market to you from our own systems. We do not upload consented email addresses to any advertising platform as a customer list under this policy.

7. Who we share information with

• ABA providers you ask to hear from. We share your contact details and search information (location, insurance, availability, child's age range, and diagnosis status) with the specific provider(s) your request identifies, so they can respond to you. We do not broadcast your information to providers you did not choose, and we do not sell personal information to anyone.
• Service providers who work on our behalf — hosting (AWS), email delivery (Resend/Amazon SES), CRM, and customer support — under contracts limiting their use of the data.
• Legal and safety disclosures where required by law or to protect rights and safety.
• Business transfers — if we are acquired or merged, information may transfer as a business asset, subject to this policy.

We do not share your information with advertising platforms for their own purposes.

8. How long we keep information

We retain match requests and family interest submissions for 24 months and then delete or de-identify them. Provider inquiries and correction records are retained for as long as needed to operate the directory. Marketing list membership is retained until you unsubscribe. Server logs are retained for up to 12 months.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, and to opt out of targeted advertising or profiling. To exercise any of these, email [email protected]. We will not discriminate against you for exercising these rights.

Washington, Nevada, and Connecticut residents. Washington's My Health My Data Act, Nevada SB 370, and similar laws give you specific rights regarding consumer health data, including inferences about health status. We treat information indicating an interest in ABA services as consumer health data under these laws. You may request a list of third parties with whom we have shared such data, and you may withdraw consent to its collection or sharing by emailing [email protected]. Our separate Consumer Health Data Privacy Notice describes these practices and rights in full.

California residents. California's CCPA/CPRA gives you specific rights regarding your personal information, including a right to know the categories collected, the sources and purposes, and any sensitive personal information used or disclosed. A full CCPA/CPRA disclosure table — including categories, sources, purposes, retention, and sensitive personal information handling — is being prepared under counsel review and will be published here. In the meantime, you may exercise CCPA/CPRA rights (access, correction, deletion, opt-out of sale/share, limit use of sensitive personal information) by emailing [email protected].

10. Security

We use administrative, technical, and physical safeguards appropriate to the information we hold, including encryption in transit, access controls on our hosting and database providers, and least-privilege operator access. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization.

11. Changes to this policy

We will post any changes here and update the "Last updated" date. If changes are material, we will provide notice on the site before they take effect and, where we have your email, notify you by email.

12. Contact

ABA Care Network™

Email: [email protected]

Mailing address available on written request to [email protected].