AnchorPoint Logics

AnchorPoint Logics LLC ("we," "our," or "the Company") develops and operates an Electronic Visit Verification (EVV) platform used by Medicaid home care agencies, caregivers, and authorized regulatory personnel. This Privacy Policy describes how we collect, use, store, and protect personal information.

By using the AnchorPoint Logics platform, you agree to the practices described in this policy. This policy applies to all users including agency administrators, caregivers, family members with portal access, and authorized surveyors.

• Name and employee identification number
• Biometric facial baseline photographs (with consent)
• Device identifiers
• Visit location data (geofence verification only)
• Training completion records

• First name only — no last names are stored in the platform
• Patient ID assigned by the enrolled agency
• Home address for anchor geofence configuration
• Service authorization types
• Family contact email (requires explicit consent)

• Clock-in and clock-out timestamps
• Visit type and duration
• NFC anchor interaction logs
• Biometric verification scores
• Cryptographic verification tokens

We use collected information exclusively for the following purposes:

• Electronic visit verification only
• Fraud detection and regulatory compliance
• Agency QA reporting and dashboards
• Regulatory audit support
• Training completion tracking

AnchorPoint Logics operates as a HIPAA Business Associate. We maintain administrative, physical, and technical safeguards as required under 45 CFR Part 164.

All Protected Health Information (PHI) is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to PHI is restricted to authorized personnel only and is logged for audit purposes.

Facial biometric baselines are collected with explicit caregiver consent and are handled with the highest level of protection:

• Stored in encrypted AWS S3 with no public access
• Never shared with third parties under any circumstances
• Used exclusively for identity verification at visit clock-in
• Deleted upon caregiver termination or agency contract end

Caregivers may withdraw biometric consent at any time by contacting their agency administrator. Withdrawal will result in alternative verification being required.

Upon contract termination, we provide a full data export within 30 days and permanently delete all PHI within 90 days, in accordance with our Business Associate Agreement obligations.

Caregivers and authorized representatives may exercise the following rights regarding their data:

• Access to their personal data held in the platform
• Correction of inaccurate data
• Deletion of data upon employment end
• Restriction of processing in certain circumstances

To exercise any of these rights, contact: privacy@anchorpointlogics.com

For privacy questions, data requests, or concerns: