Last Updated: February 6, 2025
Datavant is a health data platform company making the world’s health data secure, accessible, and actionable.
This Privacy Policy describes how Datavant (“Datavant,” “we,” and “us”) collects, uses, discloses, and protects Personal Information we collect about you or that you may provide when you interact with us or visit the websites listed below (the “Services”):
“Personal Information” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or members of your household.
By accessing our websites or using the Services, you agree to this Privacy Policy. We may update this policy at any time, and future updates are effective as soon as they are published. If you are interested, you should check back from time to time and make sure you have reviewed the most current version of the policy.
This policy does not apply to any third-party content or websites that may be accessible through links on our websites. Datavant is not responsible for the content or privacy practices of other sites. We encourage you to be aware when you leave our websites or engage with media hosted by third parties and to read the privacy statements of any other website that collects your information.
Personal Information We Collect and How We Collect It
Cookies and Similar Tracking Technologies
How We Use Your Personal Information
How We May Disclose Your Personal Information
How We Maintain and Protect Your Personal Information
Your Choices About How We Use and Disclose Your Personal Information
Disclosures for California Residents
Datavant is a Service Provider
We may collect the following categories of Personal Information about you:
If you contact us about career opportunities, we may also collect additional Personal Information about you (in addition to the Personal Information listed above), as further described in the section titled “Our Careers Page.”
We collect Personal Information:
Our websites and some of our online Services use cookies. Cookies may improve and/or simplify the use of Datavant’s websites and online Services. Of note:
Most web browsers can be set to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie. Refusing a cookie will generally not interfere with your use of our website or Services. However, refusal of a cookie may, in some cases, preclude you from using, or negatively impact the display, feature, or function of, our website and Services.
We use our Careers Page to help facilitate our recruitment process. When you contact us through our Careers Page about career opportunities at Datavant, we may ask you for certain information so we can evaluate you as a candidate and meet certain legal obligations. The information you provide directly to our Careers Page as part of the application process is collected with your consent and is collected in addition to the information you provide through our websites and Services (listed above). It may include:
During the recruitment process, you may provide Personal Information to us in the following ways:
The information you provide to us during the recruitment process is retained and processed as we evaluate you for a career opportunity. We may use this information for purposes such as:
When you provide your information to Datavant as part of the recruitment process, your information may be shared with Datavant personnel and certain third-party software and service providers working with Datavant, such as Greenhouse. Datavant personnel include members of the people and talent acquisition teams, interviewers involved in the recruitment process, personnel in the business area to which you are applying, and information technology staff. Other third-party service providers or contractors may also have access to your information including, for example, if we reach out to references or conduct background checks.
In addition to processing your information with your consent, Datavant has a legitimate interest in processing your data to manage our recruitment process and assess whether you are a viable candidate for a career at Datavant. All applicants, regardless of location, may opt out of any future contacts from Datavant at any time.
If you are applying for a job, you may opt-in to communicate with us via SMS or text messaging. Your information obtained as part of the consent process will not be shared with third parties. SMS/text messaging may be used for scheduling purposes and for sharing information about your application status, onboarding materials, or other employment-related updates. Messaging frequency may vary, and message and data rates may apply. If you have given us consent to send you SMS or text messages, you can opt out at any time by texting "STOP." You can seek assistance by texting "HELP" or contacting us.
In addition to the collection purposes described above, we may also collect Personal Information for the following reasons:
Some information we collect may be considered Sensitive Personal Information, such as your financial account information. We use and disclose your Sensitive Personal Information only for the following limited business purposes: (i) performing services an average person would expect; (ii) detecting security incidents; (iii) addressing malicious, deceptive, or illegal actions; (iv) ensuring the physical safety of individuals; (v) for short-term, transient use; (vi) performing or providing internal business services, including employee services if you are an employee; and (vii) verifying or maintaining the quality or safety of a service or product.
We may disclose your Personal Information in one or more of the following ways:
Datavant may create, use, or disclose de-identified information so long as the entities to whom Datavant discloses such de-identified data are prohibited from re-identifying or attempting to re-identify the information.
We do not sell your Personal Information to third parties in exchange for monetary or other valuable consideration, nor do we share your Personal Information with third parties for cross-contextual behavioral advertising.
We retain your Personal Information for only as long as we need it to provide our products and services, operate our business, and comply with our legal obligations. When we decide how long to keep your Personal Information, we keep in mind the nature and sensitivity of the information, the potential harm from unauthorized use, the reasons we collected the Personal Information, and our legal obligations.
For Personal Information collected through our Careers Page, we will retain it for as long as it makes use of such information as a part of the recruitment process and for other permitted purposes. If your application for employment is successful, information gathered during the recruitment process will be added to your human resources file and may be retained throughout your employment with Datavant.
The security of your Personal Information is important to us. We have adopted safeguards to protect Personal Information from misuse, interference and loss, as well as from unauthorized access, modification or disclosure. These safeguards include:
Communications between your browser and portions of the online Services containing Personal Information are protected with Secure Socket Layer (“SSL”) encryption. This encryption is to help protect your information while it is being transmitted. Once we receive your Personal Information, we use commercially reasonable efforts to maintain the physical and electronic security of such information.
NO DATA TRANSMISSION OVER THE INTERNET OR ANY WIRELESS NETWORK CAN BE GUARANTEED TO BE PERFECTLY SECURED. AS A RESULT, WHILE WE STRIVE TO PROTECT YOUR PERSONAL INFORMATION USING COMMERCIALLY AVAILABLE AND INDUSTRY STANDARD TECHNOLOGY, WE CANNOT ENSURE OR GUARANTEE THE SECURITY OF ANY INFORMATION YOU TRANSMIT TO US, AND YOU DO SO AT YOUR OWN RISK.
If we determine that your Personal Information has or may reasonably have been disclosed due to a security breach of our systems, we will notify you in accordance with and to the extent required by applicable law using the information that we have on file.
We may transfer your Personal Information among our affiliates and to our business partners, in connection with the purposes described in this Privacy Policy. This may involve the transfer of your Personal Information to countries outside your home country or region, including outside the European Economic Area if that is your region, which may have a different level of data protection from your home country.
Such countries may include, without limitation, the United States, the United Kingdom, Ireland, and other countries in which we, our affiliates, or our business partners maintain facilities. To adequately protect the transfer of your Personal Information, we enter into written contractual arrangements (as appropriate) with our affiliates and business partners for such transfers or rely on other legally approved transfer mechanisms. We take reasonable technical and organizational measures to safeguard Personal Information we transfer.
Where the processing of your Personal Information is subject to EU or UK data protection laws, you have the following data subject rights:
Please note that these rights are not absolute and in certain cases are subject to conditions specified in law. In addition to the above, you have the right to lodge a complaint with a supervisory authority if you consider that our processing of your Personal Information infringes applicable data protection law.
If you have questions related to Personal Information held by an organization that is a Datavant customer or business partner, you should reach out to that organization directly. If you have any questions about the type of Personal Information we hold about you (for example, if you have applied for a job via our Careers Page or submitted your contact information to Datavant via the forms on this website), please contact us. If you wish to request deletion or correction of Personal Information we hold about you, or to submit a request to exercise any other data subject right, please complete our Data Request Form. While we will make reasonable efforts to accommodate your request, we reserve the right to reject such requests or to impose restrictions or requirements upon such requests if required or permitted by law.
Certain U.S. States provide their residents with consumer privacy rights, such as:
The exact scope of these rights varies by State. To exercise any of the above rights, please complete our Data Request Form or contact us. While we will make reasonable efforts to accommodate your request, we reserve the right to reject such requests or to impose restrictions or requirements upon such requests if required or permitted by applicable law.
If you choose to exercise any of these rights, we will not discriminate against you in any way. Exercise of certain rights may cause you to be unable to use or access certain features of our Services.
Datavant will take steps to verify your identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we have collected Personal Information.
You may use an authorized agent to submit a request. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your Personal Information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.
Certain laws may give you a right to appeal any denials of your request to exercise your rights. If we deny your request and you would like to submit an appeal, please contact us.
California residents have the rights to knowledge, access, correction, and deletion of their personal information, as well as opt-outs rights, as described in the “U.S. State Privacy Rights” section above.
We do not do any of the following:
Personal Information We Collect. In the preceding 12 months, Datavant has collected the categories of Personal Information detailed in the “Personal Information We Collect and How We Collect It” section above, summarized as follows:
The purposes for which Datavant collects, uses, and discloses Personal Information are described above in this Privacy Policy.
Disclosures of Personal Information for a Business Purpose. During the past 12 months, we have disclosed the following categories of personal information to our third-party service providers for a business purpose:
Third Party Marketing. This Privacy Policy describes how we may share your Personal Information, including for marketing purposes. California residents are entitled to request and obtain from Datavant once per calendar year information about any of your Personal Information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us.
We are primarily a service provider for other businesses across the healthcare ecosystem. While providing services for other businesses, we may collect your Personal Information from other organizations and our business customers. Generally, the businesses we serve are responsible for determining how we may use and share your Personal Information.
Some Personal Information is considered “protected health information” that is subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). We may receive this information from HIPAA “covered entities” to provide services for them or on their behalf. Protected health information that we collect, maintain, create, transmit, or access while providing services for or on behalf of a covered entity is protected consistent with HIPAA.
Our Services are not directed at or intended for children, which we consider to be an individual under the age of 13 or the equivalent age as specified by law in your jurisdiction. We do not knowingly collect personal information from children through our website. If you are a child as understood by laws of your state or country, please do not submit any Personal Information through our website. If we learn we have collected or received personal information from a child without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child, please contact us.
If you have questions about this Privacy Policy, contact us at dataprivacy@datavant.com or by mail at:
Datavant
Attention: Compliance
2222 W. Dunlap Avenue, Suite 250
Phoenix, AZ 85021
You can also report concerns to Datavant’s Corporate Compliance Connection (C3) compliance hotline online or by calling us toll-free at 844-882-3809.
If you have questions about your medical information maintained by a healthcare organization or other entity that partners with Datavant, please reach out to that organization using the contact information in their privacy policy.
