Privacy Policy & Security Architecture

HIPAA Compliance • Zero-Retention Protocol • Last Updated: October 2026

Part 1: Interactive Clinical Web Applications (Subdomains)

All interactive calculators, decision engines, and note generators hosted across ballamed.com subdomains operate under a strict Zero-PHI (Protected Health Information) client-side execution model.

1.1 Local Browser Execution & HIPAA Safeguards

All clinical risk stratification, laboratory evaluations, gestational dating, and consultation note formatting occur 100% locally within your device’s browser session. No clinical parameters, patient age markers, or staging inputs are ever transmitted across the network, stored on remote databases, or processed on persistent backend servers. The tools operate in compliance with the privacy safeguards established by the Health Insurance Portability and Accountability Act (HIPAA).

1.2 Zero Data Retention in Application Memory

Clinical variables entered into an application exist solely within ephemeral browser memory for the active duration of your session. Clicking “Reset”, navigating away, or closing the browser tab immediately and permanently purges all entered parameters from memory.

1.3 No Commercial Tracking or Telemetry

Our clinical web applications do not deploy advertising pixels, third-party behavioral trackers, cross-site profiling tools, or commercial data-broker integrations. We do not sell, rent, monetize, or disclose clinician or patient usage data under any circumstances.

1.4 Electronic Health Record (EHR) Copy-Forward Governance

Clinicians maintain exclusive custody over generated summaries and notes. Transferring clinical outputs into institutional EHR platforms (such as Epic, Oracle Health/Cerner, AthenaHealth, or MEDITECH) adheres directly to your healthcare organization’s governing security policies and patient confidentiality protocols.

---

Part 2: Main Website Directory (ballamed.com)

This informational directory runs on WordPress to catalog tools, documentation, and methodology. The directory website functions independently from the standalone web applications.

2.1 Technical Cookies & Content Delivery

The WordPress directory uses standard technical session cookies necessary for website performance, layout caching, and basic server operations. These cookies do not access, track, or interface with any clinical inputs made inside our separate web applications.

2.2 Server Logs

Like standard web hosting environments, our hosting infrastructure automatically logs non-identifiable technical metrics (such as browser type, referring URL, time of visit, and general IP address) strictly for server load balancing, security monitoring, and DDoS mitigation.

2.3 External Links

This directory contains links to external clinical guidelines, medical society consensus papers, and institutional sources. We are not responsible for the privacy practices or content of external third-party medical websites.