Effective date: 01/01/2026

This notice applies to consumer health data collected by DIVA Solutions LLC DBA MindBridge.care (“MindBridge”) from residents of Washington, Nevada, and Connecticut, and from anyone whose data is collected in Washington.

Consumer health data we collect, and why

What we collect

Why

The fact that you enrolled in or use a mental health support membership

To provide and manage your membership

Plan type, including CareWhole services you request (e.g., care navigation, psychiatric discount access)

To connect you with the services you chose

Basic session records from our provider partner, such as date and length of a call or text session

To operate the service and handle support requests

Health-related information you choose to include in emails or support requests

To respond to you

We do not collect session content, clinical notes, or diagnoses.

Where it comes from

  • You, when you enroll, buy a membership, or contact us
  • Our provider-network partner(s)
  • Your employer, school, or sponsoring organization, if they enroll you

Consumer health data we share

We share the categories above only as needed to provide the services you requested.

Who we share it with

  • Provider-network partners: Counseling partner and licensed clinicians you’re referred to, to deliver your care.
  • Service providers that process data on our behalf under contract: hosting (Healthcare Blocks [starting November 2026]), program records (Quickbase), secure file sharing (ShareFile), email and email encryption (Titan/TitanHQ), website hosting (WordPress), and payment processing (Stripe).
  • CareWhole service partners, only when you request their services.
  • Legal and safety: when required by law, such as a court order, or when needed to protect someone’s safety in an emergency.

We do not sell or share consumer health data for advertising.

Your rights

You may:

  • Confirm whether we collect, share, or sell your consumer health data, and access it
  • Get a list of the third parties and affiliates we’ve shared it with
  • Withdraw your consent
  • Have your consumer health data deleted

To make a request, email howie@mindbridge.care with the subject “Consumer Health Data Request.” We’ll respond within 45 days (extendable once by 45 days with notice). If we deny your request, reply to appeal; we’ll respond within 45 days. If you’re not satisfied, you can contact the Attorney General of Washington, Nevada, or Connecticut.