Privacy
What we collect, and what we never do with it
ReferralRight helps a patient's physician and dentist coordinate a referral and get an answer back. This page says what information that takes, who sees it, and how long we keep it.
Effective October 3, 2026
What we never do
- We never sell information, or share it for advertising.
- We never put patient information in an email, a fax notice or a text. Those carry a secure link and a reference number only.
- We run no third-party trackers or advertising cookies, on this site or in the product.
- We never ask for a patient's name, birth date or health details through an AI assistant.
Who we are
ReferralRight is operated by Guident. It is free for patients, physicians and dentists, and nobody needs an account to send or answer a referral.
What we collect, depending on who you are
If you are a patient asking for a referral
You enter your name, date of birth and phone number, and you can add your email, gender, address and a note in your own words. You also name the clinician to ask and their office email. We use this only to prepare the request your clinician reviews, and to show you its progress on your status page. Your clinician writes and signs the medical part; you never do.
If you are a physician, dentist or their staff
A referral or an answer holds what the signing clinician enters: the patient's details, the clinical reason or findings, your name, credential, NPI, and how to reach you. We check NPI numbers against the public federal provider registry. If you choose to sign in, we keep your email and the practice details you save so you do not retype them.
If you use ReferralRight through an AI assistant
Our tools receive only what they need: a clinician's last name, state and optionally first name or ZIP code for a search of the public federal registry, and a clinician's NPI number to start a request. Any other detail sent to them is refused. They return links to our own pages, where patient details are entered, and they never look up a patient or a request. The assistant's provider handles your conversation under its own policy.
If a care team prepared a referral for you
Some care teams use ReferralRight to prepare a referral for a clinician to review. They send only facts they already hold, such as who you are and which clinicians are involved, never the clinical part. They are told when the referral is opened, sent and answered. The clinical answer itself goes only to a care team we have cleared to receive patient information.
Everyone
When you open a page or submit a form, we record the time, your IP address and which record was involved, in a security log. Our own analytics count which pages load and record errors. They never read what you type, run only in your browser tab, and switch off if your browser sends Do Not Track.
Who sees it
- The clinicians on the referral. The clinician who sends it and the clinician who answers it. A patient's request goes only to the clinician the patient names.
- The patient, through their status link, which shows progress, not clinical results. Your clinicians share results with you.
- Companies that run the service for us: Render, which hosts the product and its database; Amazon Web Services, which sends our email; and HumbleFax, which sends fax notices that carry no patient information.
- The federal provider registry, which receives an NPI number or a clinician's name when we look one up. It is a public directory.
- Anyone the law requires, such as a court order, and only what it requires.
Cookies
We set two cookies, both only when needed: one keeps a clinician signed in, and one remembers that you passed the check a referral link asks for, so you are not asked again for up to 12 hours. Neither is used for tracking or advertising.
How we protect it
Every connection is encrypted. Links to a referral are long and random, and most ask for a detail from the referral before they open. Each time a referral record is opened, exported or sent to a care team, that access is written to a log the service itself cannot change or delete.
How long we keep it
A signed referral and its answer are a record of care between clinicians, so we keep them. We cannot change what a clinician signed, but we can record a correction alongside it. Ask us and we will tell you what we hold about you.
Children
ReferralRight is not meant for children to use themselves. A parent or guardian can ask for a referral on a child's behalf.
Your questions and requests
To ask what we hold, correct something, or report a problem, email eric@hsfm.co. We answer every request, and we will tell you if a law or a clinician's signed record limits what we can change.
Changes
If this policy changes, we update this page and its effective date first.