Privacy Policy

Our three principles

Rehab.ai is grounded in three principles:

1. We are data-driven. We use available data to organize treatment information, make the basis of our listings clear, and improve accuracy through corrections and feedback.
2. We will never sell advertising. Providers cannot buy banner advertisements, sponsored listings, higher placement in search results, or advertising-supported phone numbers on Rehab.ai. We will never sell leads, including users’ contact information or treatment inquiries.
3. We will iterate to infinity. We are committed to continually improving our platform, standards, and processes. This is a commitment to ongoing work, not a guarantee that information is always complete, current, or error-free.

This Privacy Policy explains how Rehab.ai, LLC (“Rehab.ai,” “we,” or “us”) handles information in connection with this website and communications about it. Rehab.ai is a treatment directory and information platform, not a healthcare provider. Please do not send patient records or sensitive health information through our forms.

1. Information we collect and how we use it

Forms and correspondence. When you register interest in the Community Advisory Council, apply for its executive leadership role, or request a correction or removal, we collect the information you submit. This includes your name, email address, submission type, message, and any optional organization, role, professional links, or listing reference you provide. We also store a submission reference and submission time. Email correspondence includes information you send to us. We use this information to process and respond to your submission, assess council interest or an application, verify a correction or removal request, and keep a record of how the request was handled.

These submissions are not published automatically, sold as leads, or sent to treatment providers for marketing. Registration does not create a public profile, confirm a council appointment, or authorize unrelated promotional messages. A correction may update public listing facts, but does not authorize publication of your private contact information or correspondence.

Job and Advisory Board applications. When you apply through our Jobs page, we collect your selected opportunity, name, email, professional link, introduction, relevant experience, and answers to our application questions. A video is optional; we store the link you provide, not an uploaded video file. Your chosen video host controls access to that video. We use application information to review your interest and contact you about the opportunity. Applications are private and available to authorized administrators. An automatic on-page confirmation is not an assessment or an offer. Applications are reviewed by people, without automated candidate scoring or selection.

Accounts, workspaces, and listing claims

When you register as a contributor, we collect your name, contact email, requested region, and explanation of how you want to help. If you connect a ChatGPT sign-in, our authentication service supplies a user identifier and available profile information. Rehab.ai does not receive your ChatGPT password or conversation history through sign-in. Registration and sign-in do not automatically grant workspace or provider access.

For provider claims, we store the listing reference, your account and contact details, evidence of authority, and the review decision. For approved accounts, we process assigned roles and regions, access changes, proposed corrections and supporting sources, review notes, internal credits and requests, and related timestamps. We use these records to verify access, manage contributions, maintain accurate listings, prevent misuse, and account for changes.

Workspace chat messages are stored with the author’s account reference, role, workspace, and time. They are visible to authorized participants in that workspace and site administrators, not to the general public. Authorized reviewers can access submissions within their assigned responsibilities. Listing facts approved for publication may become public; account details, claim evidence, private applications, and workspace messages are not automatically published. Do not include patient records or private health details.

To request account closure or deletion of personal information, email contact@rehab.ai. Closing an account does not by itself remove a public facility listing or factual corrections. We review those requests separately and may retain limited security, access, correction, or dispute records where necessary and lawful.

AI-assisted research and agent opt-outs

Our team uses automated tools and AI services to find, compare, summarize, translate, and check publicly available provider information. Sources include government and regulatory directories, public health services, official provider websites, and information submitted for review. Public professional contact information may identify an individual. We use it to maintain and verify directory information, not to build advertising audiences.

The names on our Agents page are fictional personas for the team’s AI-assisted work. They are not clinicians or independent organizations. Research may involve automated website visits and link checks. Our rules prohibit bypassing access restrictions or collecting private patient records. Summaries, translations, and inferences may be wrong; inclusion does not establish current licensing, availability, or treatment suitability. See How Our Agents Work.

Use Request an opt-out to ask us to stop automated visits to a website you control, remove a listing you represent, or both. We collect your selected scope, website and listing URLs, name, work email, organization, role, optional details, and confirmation of authority, together with a request reference and time. These details are available to authorized reviewers to verify and fulfill the request. There is no fee or account requirement. Submission is a request for human review, not an immediate website block or removal, and the form does not send an automatic confirmation email.

You can also email contact@rehab.ai. Tell us which domains, pages, or listings the request covers. We may verify authority through an independently obtained official contact or evidence of website control. Stopping visits to your website does not automatically remove a listing or information obtained from other public sources. Removing a listing does not delete the source website. Personal-data deletion is a separate choice; you may request all three together by email. We retain only the information reasonably needed to record and honor an opt-out and explain the outcome after review.

Optional AI care-discovery chat

When available and you choose to send a question, the current question, recent conversation messages, and any selected public listing context are sent through our server to OpenAI to generate a response. This is separate from contributor workspace chat. The care-chat application keeps the conversation in page memory and does not save its contents to our application database. Clear conversation removes it from the page; clearing or closing the page does not retract information already processed by OpenAI.

Our API request disables stored responses. This is not a promise of zero retention by OpenAI: its applicable service terms and safety practices govern its processing. We also use short-lived, hashed network identifiers and request counters to limit abuse; these are not chat transcripts. Expired counters are removed during later chat requests. Hosting and security services may separately process technical logs. Avoid names, contact details, medical records, and other sensitive information. AI chat cannot diagnose, prescribe, book treatment, contact a provider, or provide emergency care.

Directory and facility information. We process facility names, addresses, contact details, and reported service information to operate the directory. Information about a facility is distinct from information about a visitor seeking care.

The U.S. facility directory is based on the 2024 National Directories of Drug and Alcohol Use Treatment Facilities and Mental Health Treatment Facilities, published by the Substance Abuse and Mental Health Services Administration (SAMHSA). These directories contain facility-reported information from the 2023 National Substance Use and Mental Health Services Survey. Rehab.ai organizes that data into location pages, listings, and service descriptions. This is a dated source, not a live verification of services, licensing, availability, or insurance coverage.

Dubai listings use the Dubai Health Authority’s published mental health facility list and individual Dubai Medical Registry records. Source dates and the scope of the import are documented in the Dubai directory report and on each listing. A mental health listing does not establish that addiction treatment is available.

International coverage draws on country-specific government, regulator, public-health, and provider sources. Source and coverage notes appear on listings and country pages where available. Coverage and verification dates differ by country. A public-source record is not a real-time verification of a provider.

Searches and saved centers. Search terms submitted in a URL are sent to our hosting service to load the search page and may appear in browser history and server logs. Search tools may load directory results from our server; autocomplete matching and the preference questionnaire run in your browser using directory data. Saved centers are stored in your browser’s local storage. They are not published as a public list or automatically transmitted to a treatment provider. Avoid entering names, medical histories, or other sensitive personal details in search fields.

Technical information. Our hosting and delivery services may process IP addresses, requested URLs, browser or device information, timestamps, and technical or security logs to deliver the website, diagnose failures, prevent abuse, and maintain security. Such information may reveal which pages you visit. We do not use your treatment searches, saved centers, or form submissions to target advertising.

Listing activity counts. We count listing visits, clicks to provider websites, and taps on provider phone links, and publish aggregate counts on Popular Listings pages. Phone clicks do not confirm connected calls. Each record contains a random event identifier, listing path, time, and action type where applicable. These records do not contain visitor names, IP addresses, phone numbers, or search histories and are not shared with providers as individual inquiries. Records older than 31 days are removed during collection. We use browser-tab storage to limit repeated counts for 30 minutes and honor detected Do Not Track and Global Privacy Control signals.

Calls and external websites. Clicking a provider’s phone link starts a call through your device. This website does not operate the paid call-routing or call-recording network described in the earlier policy. Providers and telephone carriers may receive caller information or record calls under their own practices. When you follow an external website link, that website receives information associated with your visit and its privacy policy applies.

Outbound attribution. External links may include Rehab.ai attribution parameters such as utm_source=rehab.ai and an agent campaign name. They identify a referral and may describe the public source page or link type. They do not identify a particular visitor, but a destination may associate them with its own cookies, account information, or other visit data. Our attribution code does not add search queries, submitted messages, or account identifiers. Authentication and signed download links are excluded from rewriting. Agent research requests may also identify Rehab.ai in request headers or URLs. A recorded request does not prove a human visit or guarantee it appears in a destination’s analytics.

Search suggestions. Autocomplete matches text on your device using directory data. Suggestions may use browser language, the location page you are browsing, an approximate city or state supplied by our hosting service, and aggregate increases in listing visits. We do not request precise GPS location for this feature. Autocomplete does not send each typed character to a suggestion service. If you choose “Remember searches on this device,” recent searches and selected suggestions are stored locally for up to 30 days, limited to eight entries. You can clear this history or stop remembering searches in the suggestion panel. This history is not sent to our server by the autocomplete feature. We disable optional history and inferred-location personalization when Global Privacy Control or Do Not Track is enabled. Submitted search URLs may still appear in technical logs. Google Analytics measures visits to public search and treatment-directory pages, subject to the exclusions described below. Search terms are omitted from our page-view configuration.

2. Cookies, browser storage, and external resources

Saved-center preferences use local storage in the browser you are using. You can remove individual saved centers through Saves or clear this website’s data in your browser settings. Clearing browser data may remove your saved centers, and those settings do not delete form submissions already sent to us.

Account sign-in uses authentication/session technologies, and contributor registration uses a cookie to connect your submission to a later sign-in. Our hosting or security services may use cookies or similar technologies to deliver and protect the website. Pages also load fonts from Google Fonts, which means your browser sends a request to Google when those resources load. External resource providers may receive technical information such as your IP address and browser information. Their practices are described in their own privacy notices, including Google’s Privacy Policy.

The Google tag loads on every HTML page, including treatment listings, location directories, search, account, administration, saved-center, and AI chat pages. Page paths may reveal health interests. Our page-view configuration omits URL queries, fragments, referring URLs, and page-specific titles. We do not add form answers, messages, or account identifiers to analytics events. Google signals, advertising storage, advertising user data, and advertising personalization are disabled. Google may receive your IP address, browser/device information, analytics cookies, and page activity. Its Privacy Policy applies.

The Google tag loads without a visitor opt-in prompt. Browser privacy settings, content blockers, or disabled JavaScript may prevent collection. Our separate aggregate listing counters are described above.

We do not use advertising cookies, retargeting pixels, advertising identifiers, or advertising-supported helpline cookies to sell advertising or disclose visitors’ treatment interests to advertisers. Disabling cookies or storage may affect site functionality. It does not change our no-advertising commitment.

3. When information is shared

We will never sell leads. We do not sell personal information or share it for cross-context behavioral advertising. Treatment providers cannot pay us to receive visitor contact information, search activity, saved-center information, or inquiries.

• Operating the service: hosting, database/storage, authentication, security, communications, and AI service providers may process information as needed to deliver the website and handle your requests. Our policy is to limit this processing to what is needed for the service and require appropriate confidentiality, security, and use restrictions. Operational access does not authorize independent advertising or resale.
• At your direction: we may share information with a recipient you specifically ask us to contact. A general form submission is not permission to distribute your information to providers. We may use the factual details of a correction to verify or update a listing, while limiting disclosure of private requester information.
• Legal obligations and protection: we may disclose information when required by law or reasonably necessary to protect rights, safety, and security, investigate abuse, or establish, exercise, or defend legal claims.
• Business changes: information may be transferred in a merger, acquisition, or reorganization subject to applicable law and the protections in this policy. Such a transfer does not authorize advertising-related use that this policy prohibits.

4. Your choices, corrections, and removal

You may request access to, correction of, or deletion of personal information by emailing contact@rehab.ai. We may request information reasonably necessary to verify your identity or authority. We will explain any applicable legal exception that prevents us from fulfilling a request. You can withdraw consent to optional communications by contacting us; we may still send messages needed to respond to your request or meet legal obligations.

For a facility listing, use our correction and removal form or the email address above. There is no fee and no requirement to claim a listing, create an account, apply for employment, or join the council. Whether or not you choose to get involved, we’ll respect your request not to be a part of the platform. We may verify authority before acting on a provider’s behalf.

A listing removal request and a personal-data deletion request are different: removing a public listing may still require us to retain a limited record of the request. Let us know if you are requesting both. We cannot remove information from the original data source, another website, or a search-engine cache we do not control.

For health-related searches, visits, and optional chat, also read our Consumer Health Data Privacy Notice.

5. Data retention

We retain personal information only for as long as reasonably necessary for its stated purpose. Retention depends on whether a request or application remains active, whether a record is needed to honor a correction or removal, applicable legal obligations, and the time reasonably needed to resolve disputes or investigate security incidents. These criteria apply separately to submissions, correspondence, and technical logs.

Our retention policy requires deletion or deidentification when information is no longer needed, subject to applicable legal requirements. Copies in backups may remain until the relevant backup cycle ends and are not to be used for unrelated purposes. We may retain a limited record needed to honor a removal request. You can ask us to review continued retention of your information by contacting us. Retention never authorizes selling leads or using personal information for advertising.

Account and claim records are kept while access or a claim remains active and for a justified period afterward for verification, security, and disputes. Workspace messages and contribution history remain available for ongoing work; closing a session does not erase them. Applications are kept for recruitment review and necessary follow-up, not automatically added to a marketing list. Opt-out records may need to remain so we do not resume activity you asked us to stop. These records do not all have an automatic fixed deletion timer; you can request deletion or a retention review. Listing-event records older than 31 days are removed when collection runs; optional search history expires after 30 days. Provider log and backup schedules may differ.

6. Children

The website is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information, contact us at the address below so we can investigate and take appropriate deletion steps.

7. Security

We use safeguards intended to protect personal information, including HTTPS for transmission and restrictions on public access to submitted forms. No website, transmission method, or storage system can guarantee absolute security. If a security incident triggers a legal notification requirement, we will provide the required notices. Do not submit medical records or information that is unnecessary for your request. Nothing in this policy limits rights or protections that applicable law does not allow us to waive.

8. Other U.S. states and international visitors

Depending on where you live and which laws apply, you may have additional rights to access, correct, delete, or obtain a copy of your information, withdraw consent, or appeal a denied request. Contact us to exercise these rights or request an appeal. We will explain any denial and available appeal process, subject to applicable law. The California section does not limit rights provided elsewhere.

Rehab.ai provides an international directory. Information may be processed in the United States and in other locations used by our service providers, where laws may differ from those where you live. You may contact us about your information and any rights available under applicable law.

Where the EEA or UK data-protection rules apply, Rehab.ai, LLC is the controller for the processing described here. Depending on the activity, we rely on taking steps you request or providing an account service, legitimate interests in maintaining accurate public directory information and securing the service, your consent for optional analytics and communications, or legal obligations. We consider the effect on individuals when relying on legitimate interests. A request to use a feature is not blanket consent to unrelated uses of sensitive information.

Where applicable, you may object to processing based on legitimate interests, request restriction, access, correction, erasure, or portability, and withdraw consent without affecting earlier lawful processing. You may complain to your local supervisory authority. We normally respond to EEA/UK rights requests within one month, with notice of a permitted extension where needed. Contact us using the details below. We do not use the features described here to make solely automated decisions with legal or similarly significant effects about you.

International transfers must have the protections required by applicable law, which may include an adequacy decision or contractual safeguards. Contact us to ask which recipients, processing locations, and transfer mechanism apply to your information or to request information about the relevant safeguards. A country’s inclusion in the directory is not a representation that its laws are identical to U.S. law.

9. Contact information

For privacy questions or requests, email us or write to our headquarters. Our headquarters and registered-agent addresses are listed separately below.

Headquarters and correspondence
Rehab.ai, LLC
2330 West Joppa Road
Baltimore, MD 21093 USA

Registered-agent address
1912 Capitol Ave Ste 500
Cheyenne, WY 82001 USA

Email: contact@rehab.ai

10. Changes to this policy

We will update the date on this page when this policy changes. Material changes will be identified on the website, with any additional notice or consent required by law. We will not treat continued browsing as blanket consent to materially different uses of personal information. Our commitments never to sell advertising or leads remain in place as we improve the platform.

11. California privacy rights

California residents may have rights under the California Consumer Privacy Act, as amended, subject to its scope and exceptions. This section supplements the practices and choices described above; it does not limit other applicable privacy rights.

The categories addressed by this policy include identifiers and contact information; account identifiers, assigned access and claim evidence; professional or employment information voluntarily submitted with registrations or applications; workspace messages and contribution history; correspondence and request details; internet or network activity in technical logs; and publicly available facility information. Sources, purposes, recipients, and retention considerations are described in Sections 1–5. We do not require payment-card information, government identification numbers, precise GPS location, or medical records through the council and request forms. If you voluntarily include extra information in a message, it will be included in your submission.

Where applicable, your rights include knowing what personal information is collected, used, and disclosed; accessing and obtaining a portable copy of that information; correcting inaccurate information; requesting deletion, subject to exceptions; opting out of sale or sharing for cross-context behavioral advertising; limiting certain uses of sensitive personal information; and receiving nondiscriminatory treatment for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising, and do not use sensitive personal information to infer characteristics about you for advertising.

Submit a request by emailing contact@rehab.ai. Describe the request with enough detail for us to understand it. You do not need an account. An authorized agent may act on your behalf; we may reasonably verify the agent’s authority and your identity. Information requested for verification will be used for that purpose and to protect your information.

For requests governed by the CCPA, we respond within 45 days, subject to permitted extensions. For other requests, we follow the applicable legal deadline. If an extension is permitted and needed, we will notify you of the reason and timing. If we cannot fulfill a request, we will explain why, subject to applicable law. We do not charge for ordinary requests; any fee permitted by law for excessive, repetitive, or manifestly unfounded requests will be explained before proceeding. We will not discriminate against you for exercising privacy rights.

California residents may also contact us about disclosure of personal information to third parties for their direct marketing under California’s Shine the Light law. We do not disclose your personal information to third parties for their own direct marketing. Further information about California rights is available from the California Attorney General.