Effective Date: April 22, 2026
This Privacy Policy explains how VITASIGNS collects, uses, shares, retains, and protects information about you when you visit vitasigns.com, request information about our services, communicate with us, or otherwise interact with us. It also explains your rights and the choices you have regarding that information.
VITASIGNS provides remote patient monitoring (RPM), chronic care management (CCM), principal care management (PCM), and related virtual care technology and operations services to physician practices and other healthcare providers. We are a vendor that supports licensed healthcare providers; we are not a healthcare provider, and we do not bill Medicare or other payers in our own name.
This Privacy Policy applies to information collected through our website and our communications with prospective and current clients, partners, and members of the public. If you are a patient receiving services through a healthcare provider that uses VITASIGNS technology, the privacy of your protected health information is governed by your provider's Notice of Privacy Practices and by the agreement between your provider and VITASIGNS, supplemented by our Notice of HIPAA Privacy Practices available at vitasigns.com/patient-privacy-policy. To the extent there is any conflict between this Privacy Policy and the Notice of HIPAA Privacy Practices for protected health information, the Notice of HIPAA Privacy Practices controls.
1. Who We Are
VITASIGNS is the trade name of Vitasigns LLC, a California limited liability company headquartered in Newport Beach, California. References in this Privacy Policy to "VITASIGNS," "we," "us," or "our" refer to Vitasigns LLC and its affiliates and subsidiaries acting in the capacity described above. Our contact information is provided in Section 28 below.
2. Scope of This Privacy Policy
This Privacy Policy covers information we collect:
- when you visit vitasigns.com or any subdomain we operate;
- when you complete a contact form, request a demo, subscribe to a newsletter, or otherwise communicate with us through our website;
- when you call, email, or message our team;
- when you attend a meeting, event, or webinar we host or sponsor;
- when our service providers collect information on our behalf in connection with the activities above.
3. Definitions
The following definitions apply throughout this Privacy Policy:
- Personal Information. Information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
- Protected Health Information (PHI). Individually identifiable health information that is created, received, maintained, or transmitted by a healthcare provider, health plan, or business associate as defined under HIPAA, 45 CFR 160.103.
- Sensitive Personal Information. The subset of Personal Information that includes Social Security number, driver's license or state identification number, financial account information together with any required access code, precise geolocation, racial or ethnic origin, religious beliefs, mail and electronic communications contents, genetic data, biometric information for the purpose of uniquely identifying an individual, and information concerning health, sex life, or sexual orientation.
- Sale. Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating Personal Information to a third party for monetary or other valuable consideration. VITASIGNS does not sell Personal Information.
- Share. As defined in California law, sharing Personal Information with a third party for cross-context behavioral advertising. VITASIGNS does not share Personal Information for cross-context behavioral advertising.
- Service Provider. An entity that processes Personal Information on our behalf under a written contract that limits how the entity may use the information.
- Third Party. An entity other than us, our service providers, or you.
4. Relationship to Our Notice of HIPAA Privacy Practices
If you are a patient receiving services through a healthcare provider that uses VITASIGNS technology, your provider is responsible for the privacy of your Protected Health Information as a HIPAA-covered entity. We act as a business associate of your provider, governed by a written Business Associate Agreement that requires us to protect PHI consistent with HIPAA. Our Notice of HIPAA Privacy Practices, available at vitasigns.com/patient-privacy-policy, describes how we may use and disclose PHI in that role. To the extent there is any conflict between this Privacy Policy and the Notice of HIPAA Privacy Practices for PHI, the Notice of HIPAA Privacy Practices controls.
This Privacy Policy applies to Personal Information that is not PHI, including information collected from website visitors, prospective clients, and the general public.
5. Categories of Personal Information We Collect
In the past twelve months, we have collected the following categories of Personal Information:
- Identifiers. Name, postal address, email address, telephone number, online identifiers, IP address, account name, and similar identifiers.
- Customer records information. Name, signature, telephone number, employer, professional information such as title and credentials, and similar information you provide when contacting us about our services.
- Commercial information. Records of products or services considered or obtained, and inquiries about pricing or service offerings.
- Internet or other electronic network activity information. Browsing history, search history, information regarding interaction with our website and emails, including pages viewed, time spent, links clicked, and similar information collected automatically by cookies and similar technologies.
- Geolocation data. General location derived from IP address. We do not collect precise geolocation through our website.
- Professional or employment information. Information about your role, employer, and professional context when you communicate with us in a business capacity.
- Inferences. Inferences drawn from any of the above to create a profile reflecting your preferences or behavior, used solely for understanding what content and services may be relevant to you.
6. Sources of Personal Information
We collect Personal Information from the following sources:
- directly from you when you complete forms, communicate with us, or attend our events;
- automatically from your device when you visit our website through cookies, log files, and analytics tools;
- from healthcare providers, partners, or other third parties who refer you to us with your knowledge;
- from publicly available sources such as professional directories and social media profiles you have made public;
- from data providers we use to identify potential clients in healthcare provider organizations, used only in a business-to-business context.
7. How We Use Personal Information
We use Personal Information for the following purposes:
- to respond to your inquiries and communicate with you about our services;
- to send you marketing communications about our services if you have opted in, and to allow you to opt out at any time;
- to operate, maintain, secure, and improve our website and services;
- to perform analytics and measure the effectiveness of our marketing and outreach;
- to coordinate sales, demonstrations, contracting, and onboarding with prospective clients;
- to comply with legal obligations and enforce our agreements;
- to detect, investigate, and prevent fraud, security incidents, and abuse;
- to support business transactions such as financing, mergers, or acquisitions, with appropriate confidentiality protections.
8. Categories of Personal Information Disclosed in the Past Twelve Months
In the past twelve months, we have disclosed each of the categories of Personal Information identified in Section 5 to the categories of recipients identified in Section 9, for the business purposes identified in Section 7. We have not sold Personal Information for monetary consideration in the past twelve months. We have not shared Personal Information for cross-context behavioral advertising in the past twelve months.
9. Categories of Third Parties With Whom We Share Personal Information
We share Personal Information only with the following categories of recipients:
- Service providers and processors. Companies that perform services on our behalf and are bound by written contracts that limit their use of Personal Information. This includes our website hosting and content management provider (HubSpot), email and SMS gateway providers (including Twilio), analytics and marketing measurement providers, customer relationship management providers, payment processors, IT and security service providers, and professional services advisors.
- Healthcare provider clients and partners. When facilitating a relationship between you and a healthcare provider that uses our services, we may share relevant Personal Information with that provider for the purpose of facilitating the introduction or service relationship you have requested.
- Authorities and regulators. Law enforcement, regulatory, or governmental authorities when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect rights, property, or safety.
- Successors in interest. Acquirers, investors, or successor entities in connection with a financing, merger, acquisition, reorganization, sale of assets, or bankruptcy, with appropriate protections for the confidentiality and security of Personal Information.
- With your consent. Other parties when you have directed or authorized us to share Personal Information with them.
10. Sale and Sharing of Personal Information
VITASIGNS does not sell Personal Information for monetary or other valuable consideration. VITASIGNS does not share Personal Information with third parties for cross-context behavioral advertising. We do not engage in any conduct that would constitute a "sale" or "share" as those terms are defined under the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, or the comparable laws of other US states with consumer privacy laws in effect.
VITASIGNS does not sell, rent, or share mobile phone numbers, SMS opt-in data, or consent records with any third party or affiliate for marketing or promotional purposes. Mobile information may be shared only with the service providers we use to deliver the messages you have requested. For full details on SMS practices, see our SMS and Email Disclaimers page.
11. Sensitive Personal Information
We do not collect or process Sensitive Personal Information for any purpose other than: performing the services or providing the goods reasonably expected by you; preventing, detecting, and responding to security incidents or fraudulent or illegal activity; ensuring the physical safety of individuals; short-term, transient use to maintain the quality of our services; performing services on behalf of the business such as authentication, account management, customer service, and processing transactions; and verifying or maintaining the quality or safety of services we provide.
You have the right to limit our use and disclosure of Sensitive Personal Information to the purposes listed above. To exercise this right, contact us using the information in Section 28.
12. Cookies, Tags, and Tracking Technologies
Our website uses cookies and similar technologies to operate the site, remember your preferences, measure performance, and improve your experience. The categories of cookies we use are described in detail in our Cookie Policy. You can manage your cookie choices through the cookie banner that appears on your first visit to vitasigns.com and through the Cookie Preferences link in our footer at any time. We honor Global Privacy Control (GPC) signals to opt out of sale and share of Personal Information.
13. SMS and Mobile Communications
If you opt in to receive SMS messages from VITASIGNS, we collect your mobile phone number, the date and time of your opt-in, the source of your opt-in, and message engagement data such as delivery status and opt-out events. We use mobile information to send appointment reminders, device alerts, care notifications, billing notifications, and other communications related to the services you have enrolled in. Message frequency varies based on your enrollment and care needs, typically up to 10 messages per month. Message and data rates may apply.
VITASIGNS does not sell, rent, or share mobile phone numbers, SMS opt-in data, or consent records with any third party or affiliate for marketing or promotional purposes. Reply STOP to any text message to opt out. Reply HELP for support. For full SMS Program Terms, see vitasigns.com/sms-email-disclaimers.
14. Email Communications
VITASIGNS sends two categories of email: transactional emails directly related to the services you have requested or enrolled in, and marketing emails about our services or industry topics. Transactional emails may continue even if you opt out of marketing emails. Marketing emails always include an unsubscribe link in the footer. We honor unsubscribe requests within ten business days as required by the CAN-SPAM Act. Our physical mailing address is provided in the footer of every marketing email and in Section 28 of this Privacy Policy.
15. Children's Privacy
Our website is intended for adults and is not directed to children under thirteen. We do not knowingly collect Personal Information from children under thirteen. If you believe a child under thirteen has provided Personal Information to us, contact us at hello@vitasigns.com and we will promptly delete that information.
If you are under sixteen and a resident of California, Connecticut, Colorado, or another state that affords additional rights to minors, we will not sell or share your Personal Information without affirmative authorization. As described in Section 10, we do not sell or share Personal Information for cross-context behavioral advertising under any circumstances.
16. Data Retention
We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations, to enforce our agreements, or to resolve disputes. We apply the following general retention periods:
- Website analytics and log files. Up to 26 months.
- Marketing contact information. Until you unsubscribe or for up to 36 months of inactivity, whichever is sooner, after which we delete or anonymize.
- SMS consent records. Four years from the date of opt-in or last opt-in confirmation, consistent with the TCPA statute of limitations.
- Sales and customer relationship records. For the duration of the relationship plus up to seven years thereafter for legal and accounting purposes.
- Records subject to legal hold or active litigation. Until the legal hold is lifted or the matter is concluded.
17. How We Protect Personal Information
We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of Personal Information. Our safeguards include encryption in transit using TLS, encryption at rest where appropriate, access controls and authentication requirements, employee training, vendor due diligence and contractual protections, security monitoring, and incident response procedures. No system can be guaranteed to be one hundred percent secure. If you have reason to believe that your interaction with us is no longer secure, contact us immediately at hello@vitasigns.com.
18. International Data Transfers
VITASIGNS is based in the United States and processes Personal Information primarily within the United States. If you access our website or interact with us from outside the United States, your Personal Information will be transferred to and processed in the United States. If you are located in the United Kingdom or the European Economic Area, please review our GDPR Compliance Statement for additional information about international transfers and your rights.
19. Your Privacy Rights and Choices
Depending on where you live, you may have certain rights with respect to your Personal Information. We honor the following rights for all individuals located in the United States:
- Right to know. You may request information about the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the purposes of collection, and the categories of recipients.
- Right to access. You may request a copy of the Personal Information we hold about you in a portable format.
- Right to correct. You may request that we correct inaccurate Personal Information.
- Right to delete. You may request that we delete Personal Information we have collected about you, subject to exceptions in applicable law.
- Right to opt out of sale or sharing. You may opt out of the sale or sharing of your Personal Information. As described in Section 10, we do not sell or share Personal Information.
- Right to limit use of Sensitive Personal Information. You may direct us to limit our use of Sensitive Personal Information to the permitted purposes described in Section 11.
- Right to non-discrimination. We will not discriminate against you for exercising any of these rights.
- Right to appeal. If we deny a request, you have the right to appeal. Instructions for filing an appeal will be included in our denial response.
20. How to Exercise Your Rights
To exercise any of the rights described above, you may:
- email us at privacy@vitasigns.com with the subject line "Privacy Rights Request";
- call us at (949) 200-6840 and ask for the Privacy Officer;
- send a written request to Vitasigns LLC, Attn: Privacy Officer, 3723 Birch St., Suite 10, Newport Beach, CA 92660.
We will respond within forty-five days, with one possible forty-five day extension if reasonably necessary. You may also designate an authorized agent to make a request on your behalf.
21. Authorized Agents
You may use an authorized agent to submit a privacy rights request on your behalf. The authorized agent must provide written permission signed by you authorizing the agent to act on your behalf, or a power of attorney that is valid under California law, plus proof of the agent's identity. Even when using an authorized agent, we may contact you directly to verify your identity and confirm that you authorized the request.
22. California Specific Disclosures
This section provides additional disclosures required by the California Consumer Privacy Act and the California Privacy Rights Act. The categories of Personal Information we have collected, disclosed for a business purpose, and the categories of recipients are described in Sections 5, 8, and 9. We have not sold or shared Personal Information in the past twelve months. We do not currently offer financial incentives or quality-of-service differences in exchange for the collection, sale, or retention of Personal Information.
California Civil Code Section 1798.83 (the Shine the Light law) permits California residents to request information about how we share certain Personal Information with third parties for the third parties' direct marketing purposes. We do not share Personal Information with third parties for the third parties' direct marketing purposes.
23. Other US State Specific Disclosures
Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have privacy rights under their respective state laws. If you are a resident of one of these states, you may exercise the rights described in Section 19 using the procedures described in Section 20. You also have the right to appeal a denial of a privacy rights request, which we will explain in any denial response. If we deny your appeal, you may contact your state Attorney General to submit a complaint.
We do not engage in targeted advertising as that term is defined under any applicable state privacy law. We do not engage in profiling that produces legal or similarly significant effects concerning consumers.
24. Automated Decision-Making and Artificial Intelligence
VITASIGNS does not use automated decision-making, including profiling, that produces legal or similarly significant effects concerning you. We do not use Personal Information collected through our website to train artificial intelligence models that make decisions about you. Our internal teams may use AI-assisted tools to draft communications and improve operational efficiency. When such tools touch Personal Information, we use them under contractual restrictions that prohibit the AI provider from using the information to train third-party models.
25. Do Not Track and Global Privacy Control
Our website does not respond to Do Not Track signals at this time because there is no industry standard for how they should be honored. We do honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of Personal Information for users in jurisdictions that recognize GPC. As described in Section 10, we do not sell or share Personal Information.
26. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The most recent version is always available at vitasigns.com/privacy-policy with an updated Last Updated date. If we make material changes, we will provide additional notice such as a banner on our website. Your continued use of our website after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
27. Notice of Privacy Incidents
If we experience a security incident that affects your Personal Information and applicable law requires notice, we will notify you in accordance with that law. Contact us at hello@vitasigns.com to report a suspected vulnerability or incident involving our website or services.
28. Contact Us
For questions about this Privacy Policy or to exercise your privacy rights:
Vitasigns LLC
Attn: Privacy Officer
3723 Birch St., Suite 10
Newport Beach, CA 92660
Email: privacy@vitasigns.com
General contact: hello@vitasigns.com
Phone: (949) 200-6840
Last Updated: April 22, 2026