Legal
Privacy policy
Last updated November 3, 2026. Draft pending counsel review.
The short version
- Candidates are anonymous to employers until they release their identity for a specific application.
- We are not a HIPAA covered entity and we do not store protected health information. Do not upload patient documents.
- You can export everything we hold about you and delete your account yourself, any time, from Account settings.
- We do not sell personal data and we do not run third-party advertising pixels.
What we collect
Accounts
Email address, name, and sign-in records. Employer accounts also carry organization details and billing records processed by Stripe; we store Stripe identifiers, not card numbers.
Candidate profiles
Profession, specialty, training and board status, licensed states, work authorization, availability, preferences, and documents you upload (CV, license, certificates). Documents are private objects served through short-lived signed links; every access is logged.
Applications and messages
Your applications, screening answers, messages with employers, interview slots and offers. Employers see only what you choose to release.
Public registry data
Our clinician, licensee and facility directories are built from public records: the CMS NPPES file, state licensing boards’ open data, CMS Care Compare and HRSA. From those sources we store and display name, credential, taxonomy, license category and status, practice city and state. We do not display license numbers, street addresses, phone numbers, or dates of birth from those sources. You can claim your record to control what is shown.
Usage
Server logs with request identifiers and IP addresses (kept for security and rate limiting), and, when enabled, first-party product analytics (PostHog) without session recording or form capture.
How we use it
- To run the service: matching, alerts, applications, pipeline, messaging, billing.
- To send transactional email (application updates, interviews, offers, receipts). Marketing email — alerts, digests, the weekly roundup — always carries a one-click unsubscribe.
- To keep the platform safe: rate limiting, fraud and abuse detection, moderation.
- To produce aggregate statistics such as median advertised pay. Aggregates never identify a person.
Who can see your data
- Employers see an anonymous handle and structured facts. Your name, email and documents are shared only when you release identity for an application, or accept an invitation and then apply.
- Service providers who process data for us: hosting, database, object storage, email delivery (Resend), payments (Stripe), job queue (Inngest), analytics (PostHog). Each is bound by a data-processing agreement.
- Authorities when required by law.
Your choices
- Visibility: hidden, anonymous, or public — set on your profile.
- Block any employer from seeing or contacting you.
- Export your data as JSON from Account.
- Delete your account from Account. Personal data is hard-deleted after a 7-day grace period; anonymized counts are retained.
- Residents of California, Virginia, Colorado, Connecticut and other states with privacy laws can exercise access, deletion and opt-out rights through the same self-serve tools or by emailing privacy@scrubhub.ai.
Retention
Account data is kept while your account is active and deleted on request. Application records are kept as long as either party’s account exists. Backups are retained for 30 days. Server logs are kept for 90 days.
Security
Encryption in transit and at rest, hashed API keys, signed and expiring document links, least-privilege access, and dependency audits in our build pipeline. Report security issues to security@scrubhub.ai.
Children
ScrubHub is for licensed and training clinicians and the people who hire them. We do not knowingly collect data from anyone under 18.
Changes
We will post changes here and, for material changes, email account holders.
Contact
privacy@scrubhub.ai