Privacy Policy

Our three principles

Rehab.ai is grounded in three principles:

We are data-driven. We use available data to organize treatment information, make the basis of our listings clear, and improve accuracy through corrections and feedback.
We will never sell advertising. Providers cannot buy banner advertisements, sponsored listings, higher placement in search results, or advertising-supported phone numbers on Rehab.ai. We will never sell leads, including users’ contact information or treatment inquiries.
We will iterate to infinity. We are committed to continually improving our platform, standards, and processes. This is a commitment to ongoing work, not a guarantee that information is always complete, current, or error-free.

This Privacy Policy explains how Rehab.ai, LLC (“Rehab.ai,” “we,” or “us”) handles information in connection with this website and communications about it. Rehab.ai is a treatment directory and information platform, not a healthcare provider. Please do not send patient records or sensitive health information through our forms.

1. Information we collect and how we use it

Forms and correspondence. When you register interest in the Community Advisory Council, apply for its executive leadership role, or request a correction or removal, we collect the information you submit. This includes your name, email address, submission type, message, and any optional organization, role, professional links, or listing reference you provide. We also store a submission reference and submission time. Email correspondence includes information you send to us. We use this information to process and respond to your submission, assess council interest or an application, verify a correction or removal request, and keep a record of how the request was handled.

These submissions are not published automatically, sold as leads, or sent to treatment providers for marketing. Registration does not create a public profile, confirm a council appointment, or authorize unrelated promotional messages. A correction may update public listing facts, but does not authorize publication of your private contact information or correspondence.

Job and Advisory Board applications. When you apply through our Jobs page, we collect your selected opportunity, name, email, professional link, introduction, relevant experience, and answers to our application questions. A video is optional; we store the link you provide, not an uploaded video file. Your chosen video host controls access to that video. We use application information to review your interest and contact you about the opportunity. Applications are private and available to authorized administrators. An automatic on-page confirmation is not an assessment or an offer. Applications are reviewed by people, without automated candidate scoring or selection.

Directory and facility information. We process facility names, addresses, contact details, and reported service information to operate the directory. Information about a facility is distinct from information about a visitor seeking care.

The U.S. facility directory is based on the 2024 National Directories of Drug and Alcohol Use Treatment Facilities and Mental Health Treatment Facilities, published by the Substance Abuse and Mental Health Services Administration (SAMHSA). These directories contain facility-reported information from the 2023 National Substance Use and Mental Health Services Survey. Rehab.ai organizes that data into location pages, listings, and service descriptions. This is a dated source, not a live verification of services, licensing, availability, or insurance coverage.

Dubai listings use the Dubai Health Authority’s published mental health facility list and individual Dubai Medical Registry records. Source dates and the scope of the import are documented in the Dubai directory report and on each listing. A mental health listing does not establish that addiction treatment is available.

Searches and saved centers. Search terms submitted in a URL are sent to our hosting service to load the search page and may appear in browser history and server logs. Search matching and the current preference questionnaire run in your browser using directory data. Saved centers are stored in your browser’s local storage. They are not published as a public list or automatically transmitted to a treatment provider. Avoid entering names, medical histories, or other sensitive personal details in search fields.

Technical information. Our hosting and delivery services may process IP addresses, requested URLs, browser or device information, timestamps, and technical or security logs to deliver the website, diagnose failures, prevent abuse, and maintain security. Such information may reveal which pages you visit. We do not use your treatment searches, saved centers, or form submissions to target advertising.

Listing activity counts. We count listing visits, clicks to provider websites, and taps on provider phone links, and publish aggregate counts on Popular Listings pages. Phone clicks do not confirm connected calls. Each record contains a random event identifier, listing path, time, and action type where applicable. These records do not contain visitor names, IP addresses, phone numbers, or search histories and are not shared with providers as individual inquiries. Records older than 31 days are removed during collection. We use browser-tab storage to limit repeated counts for 30 minutes and honor detected Do Not Track and Global Privacy Control signals.

Calls and external websites. Clicking a provider’s phone link starts a call through your device. This website does not operate the paid call-routing or call-recording network described in the earlier policy. Providers and telephone carriers may receive caller information or record calls under their own practices. When you follow an external website link, that website receives information associated with your visit and its privacy policy applies.

Search suggestions. Autocomplete matches text on your device using directory data. Suggestions may use browser language, the location page you are browsing, an approximate city or state supplied by our hosting service, and aggregate increases in listing visits. We do not request precise GPS location for this feature. Autocomplete does not send each typed character to a suggestion service. If you choose “Remember searches on this device,” recent searches and selected suggestions are stored locally for up to 30 days, limited to eight entries. You can clear this history or stop remembering searches in the suggestion panel. This history is not sent to our server by the autocomplete feature. We disable optional history and inferred-location personalization when Global Privacy Control or Do Not Track is enabled. Submitted search URLs may still appear in the technical logs and analytics described in this policy.

2. Cookies, browser storage, and external resources

Saved-center preferences use local storage in the browser you are using. You can remove individual saved centers through Saves or clear this website’s data in your browser settings. Clearing browser data may remove your saved centers, and those settings do not delete form submissions already sent to us.

Our hosting or security services may use cookies or similar technologies to deliver and protect the website. Pages also load fonts from Google Fonts, which means your browser sends a request to Google when those resources load. External resource providers may receive technical information such as your IP address and browser information. Their practices are described in their own privacy notices, including Google’s Privacy Policy.

We use Google Analytics to understand website traffic and improve the website. Google Analytics uses cookies and receives information about website usage, pages visited, and browsers and devices. We disable Google signals and advertising personalization in our site tag. See Google’s Privacy Policy for more information.

We do not use advertising cookies, retargeting pixels, advertising identifiers, or advertising-supported helpline cookies to sell advertising or disclose visitors’ treatment interests to advertisers. Disabling cookies or storage may affect site functionality. It does not change our no-advertising commitment.

We will never sell leads. We do not sell personal information or share it for cross-context behavioral advertising. Treatment providers cannot pay us to receive visitor contact information, search activity, saved-center information, or inquiries.

Operating the service: hosting, storage, security, and communications providers may process information as needed to deliver the website and handle your requests. Our policy is to limit this processing to what is needed for the service and require appropriate confidentiality, security, and use restrictions. Operational access does not authorize independent advertising or resale.
At your direction: we may share information with a recipient you specifically ask us to contact. A general form submission is not permission to distribute your information to providers. We may use the factual details of a correction to verify or update a listing, while limiting disclosure of private requester information.
Legal obligations and protection: we may disclose information when required by law or reasonably necessary to protect rights, safety, and security, investigate abuse, or establish, exercise, or defend legal claims.
Business changes: information may be transferred in a merger, acquisition, or reorganization subject to applicable law and the protections in this policy. Such a transfer does not authorize advertising-related use that this policy prohibits.

4. Your choices, corrections, and removal

You may request access to, correction of, or deletion of personal information by emailing contact@rehab.ai. We may request information reasonably necessary to verify your identity or authority. We will explain any applicable legal exception that prevents us from fulfilling a request. You can withdraw consent to optional communications by contacting us; we may still send messages needed to respond to your request or meet legal obligations.

For a facility listing, use our correction and removal form or the email address above. There is no fee and no requirement to claim a listing, create an account, apply for employment, or join the council. Whether or not you choose to get involved, we’ll respect your request not to be a part of the platform. We may verify authority before acting on a provider’s behalf.

A listing removal request and a personal-data deletion request are different: removing a public listing may still require us to retain a limited record of the request. Let us know if you are requesting both. We cannot remove information from the original data source, another website, or a search-engine cache we do not control.

5. Data retention

We retain personal information only for as long as reasonably necessary for its stated purpose. Retention depends on whether a request or application remains active, whether a record is needed to honor a correction or removal, applicable legal obligations, and the time reasonably needed to resolve disputes or investigate security incidents. These criteria apply separately to submissions, correspondence, and technical logs.

Our retention policy requires deletion or deidentification when information is no longer needed, subject to applicable legal requirements. Copies in backups may remain until the relevant backup cycle ends and are not to be used for unrelated purposes. We may retain a limited record needed to honor a removal request. You can ask us to review continued retention of your information by contacting us. Retention never authorizes selling leads or using personal information for advertising.

6. Children

The website is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information, contact us at the address below so we can investigate and take appropriate deletion steps.

7. Security

We use safeguards intended to protect personal information, including HTTPS for transmission and restrictions on public access to submitted forms. No website, transmission method, or storage system can guarantee absolute security. If a security incident triggers a legal notification requirement, we will provide the required notices. Do not submit medical records or information that is unnecessary for your request. Nothing in this policy limits rights or protections that applicable law does not allow us to waive.

8. Other U.S. states and international visitors

Depending on where you live and which laws apply, you may have additional rights to access, correct, delete, or obtain a copy of your information, withdraw consent, or appeal a denied request. Contact us to exercise these rights or request an appeal. We will explain any denial and available appeal process, subject to applicable law. The California section does not limit rights provided elsewhere.

Rehab.ai focuses on U.S. treatment facilities. Information may be processed in the United States and in other locations used by our service providers, where laws may differ from those where you live. You may contact us about your information and any rights available under applicable law.

9. Contact information

For privacy questions or requests, email us or write to our headquarters. Our headquarters and registered-agent addresses are listed separately below.

Headquarters and correspondence
Rehab.ai, LLC
2330 West Joppa Road
Baltimore, MD 21093 USA

Registered-agent address
1912 Capitol Ave Ste 500
Cheyenne, WY 82001 USA

Email: contact@rehab.ai

10. Changes to this policy

We will update the date on this page when this policy changes. Material changes will be identified on the website, with any additional notice or consent required by law. We will not treat continued browsing as blanket consent to materially different uses of personal information. Our commitments never to sell advertising or leads remain in place as we improve the platform.

11. California privacy rights

California residents may have rights under the California Consumer Privacy Act, as amended, subject to its scope and exceptions. This section supplements the practices and choices described above; it does not limit other applicable privacy rights.

The categories addressed by this policy include identifiers and contact information; professional or employment information voluntarily submitted with council registrations or applications; correspondence and request details; internet or network activity in technical logs; and publicly available facility information. Sources, purposes, recipients, and retention considerations are described in Sections 1–5. We do not require payment-card information, government identification numbers, precise GPS location, or medical records through the council and request forms. If you voluntarily include extra information in a message, it will be included in your submission.

Where applicable, your rights include knowing what personal information is collected, used, and disclosed; accessing and obtaining a portable copy of that information; correcting inaccurate information; requesting deletion, subject to exceptions; opting out of sale or sharing for cross-context behavioral advertising; limiting certain uses of sensitive personal information; and receiving nondiscriminatory treatment for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising, and do not use sensitive personal information to infer characteristics about you for advertising.

Submit a request by emailing contact@rehab.ai. Describe the request with enough detail for us to understand it. You do not need an account. An authorized agent may act on your behalf; we may reasonably verify the agent’s authority and your identity. Information requested for verification will be used for that purpose and to protect your information.

For requests governed by the CCPA, we respond within 45 days, subject to permitted extensions. For other requests, we follow the applicable legal deadline. If an extension is permitted and needed, we will notify you of the reason and timing. If we cannot fulfill a request, we will explain why, subject to applicable law. We do not charge for ordinary requests; any fee permitted by law for excessive, repetitive, or manifestly unfounded requests will be explained before proceeding. We will not discriminate against you for exercising privacy rights.

California residents may also contact us about disclosure of personal information to third parties for their direct marketing under California’s Shine the Light law. We do not disclose your personal information to third parties for their own direct marketing. Further information about California rights is available from the California Attorney General.