HIPAA Disclaimer
Scope of Services
Geo-Metric Procurement is a business-to-business procurement platform that facilitates the ordering and fulfillment of durable medical equipment (DME) for healthcare organizations. Our services are limited to the procurement process: product browsing, quote requests, order placement, payment processing, shipment tracking, and after-sales support.
No Protected Health Information
The Platform does not collect, store, process, or transmit Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Our platform handles only business procurement data, including:
- Organization and facility names
- Business contact information for procurement staff
- Shipping and billing addresses
- Product selections and order details
- Payment and transaction records
None of these data elements constitute PHI, as they relate to business procurement activities rather than individual patient care or health records.
Platform Purpose
Our platform is designed exclusively for procurement operations. It is not a clinical system, electronic health record (EHR), or patient management tool. The Platform does not interface with any clinical systems, patient databases, or health information exchanges.
User Responsibility
Users of the Platform must not enter any patient-identifiable information, clinical data, or other Protected Health Information into any field on the Platform, including but not limited to:
- Order notes or descriptions
- Messaging conversations with our operations team
- After-sales request descriptions
- Account profile information
If PHI is inadvertently submitted through the Platform, please notify us immediately through our Contact page so that we can take appropriate action to remove it.
Inadvertent PHI Submission
If we identify or are notified that PHI may have been submitted, we will restrict access to the affected material, review the submission, remove or isolate the information where feasible, and coordinate follow-up with the submitting organization. We may also preserve limited audit records needed to document the handling of the incident.
For signed-in messages and after-sales descriptions, the Platform uses local pattern-based detection for common patient identifiers. Suspected message bodies and descriptions are held from normal support visibility until an administrator clears or redacts them.
Business Associate Agreements
Because the Platform does not handle PHI, Geo-Metric Procurement does not operate as a Business Associate under HIPAA and does not enter into Business Associate Agreements (BAAs) in connection with the use of this platform.
Contact
If you have questions about this disclaimer or our data handling practices, please reach out through our Contact page.