Privacy Policy

Effective September 23, 2026 · updated October 30, 2026

Provider Enrollment Credentialing Services is a trade name of IntelliStem LLC, a New Jersey limited liability company ("PECS", "we"). This policy explains what information we collect through pecs.health and in providing our services, how we use it, and the choices you have.

What We Collect

• Contact details you send through the contact form or by email: name, practice, email, phone and your message.
• Credentialing information you provide at intake or during an engagement: practice and provider details, NPI and tax identification, licenses, certifications, education, work history, malpractice coverage, disclosure answers, and supporting documents.
• Sensitive identifiers. We collect Social Security numbers and dates of birth only through an encrypted one-time channel. Each value can be revealed once, for entry into the payer or government system that requires it, and is then destroyed automatically. We never store these in plain text and never collect them through the intake form.
• Portal access you grant us (for example PECOS, CAQH (DataSpring) or Availity). Credentials are kept in a commercial password manager, never in plain text.
• Payment information. Payments are processed by Stripe. We do not receive or store full card or bank account numbers.
• Public professional data. We use public directories such as the CMS National Plan and Provider Enumeration System (NPPES) and other public CMS and state data to identify practices that may need our services, and may email them about those services. Every such email offers a way to opt out, and we honor opt-outs.
• Basic technical data such as your browser type and pages requested, recorded by our hosting provider. The intake form saves your progress in your own browser so you do not lose it; that copy stays on your device until you submit or clear it.
• How you found us. Your browser remembers the website or link that brought you here (for example a search engine or an email link) and the first page you visited. If you later send a form, that is sent with it so we know which channels help people find us.
• How the site is used. To improve the site, we record which pages are viewed and a few key clicks (such as the quote, intake, phone and email links), tied to a random ID stored in your browser. We do not use cookies for this, do not record your IP address or anything you type, and do not share it. If your browser sends a Do Not Track or Global Privacy Control signal, none of this is recorded. If you contact us, we may connect that to your visit so we know which pages helped. Records are deleted after 180 days.
• Advertising. We advertise on Meta (Facebook and Instagram) and Google. Our public pages load the Meta Pixel and the Google tag, which use cookies to tell those companies that a browser visited pecs.health and whether it asked for a quote or sent a message, so we can show our ads to past visitors and see which ads work. We send them nothing you type into a form. These tags are not loaded on client pages (quotes, agreements, uploads, status, intake or the secure link), and not at all if your browser sends a Do Not Track or Global Privacy Control signal. Meta and Google handle that data under their own privacy policies, and you can limit ad personalization in your Meta and Google account settings.
• Links and emails we send you. When you open a quote, agreement, upload or status link we sent you, we record that the page was viewed and when, so we know whether it reached you. Some of our emails include our logo loaded from our server, which tells us the email was probably opened (your mail app may load images automatically or block them). We use this only to follow up on your request.
• Intake progress. When you start the intake, the first answers you give (name, email, phone, state and, if you enter it, your NPI) are saved to our system right away so we can help you finish, and your answers in progress are saved to a private draft link as you type. We use them only to complete your credentialing request and to follow up about it. Documents upload, and the request is reviewed, only when you submit. Your Social Security number is never collected on the form.

How We Use It

We use this information only to answer your questions, prepare and submit the applications you engage us for, follow up with payers, keep credentials and enrollments current, invoice for our services, and meet legal obligations. We do not sell personal information. Apart from the advertising tags described above, we do not use it for advertising. To improve the wording of our website, we also study the questions people send us after removing names, contact details, identifiers and anything about patients; only the general themes are kept.

Who We Share It With

We share credentialing information with the payers, government programs, credentialing databases and verification sources that an application requires, because that is the service. We also rely on service providers that process data on our behalf under their own security commitments: website hosting, our database and document storage, email, e-signature, payment processing, and AI tools we use to read documents and draft correspondence. We disclose information if the law requires it.

How We Protect It

Access to client records is limited to PECS and protected by authentication and database access rules. Documents are stored in private storage, not public links. Sensitive identifiers are encrypted and destroyed on use as described above. No system is perfectly secure, and we will notify affected clients of a breach as the law requires.

Patient Information

Our services concern practitioner credentialing, not patient care, and we do not need patient records to perform them. If a client wants one, we sign a mutual Business Associate Agreement.

How Long We Keep It

We keep engagement records while we provide services to you and for as long as needed afterward to meet legal, tax and contractual obligations. When an engagement ends we deliver your application records and status documentation to you. You can ask us to delete information we no longer need to keep.

Your Choices

You can ask to see, correct or delete the personal information we hold about you, or to stop receiving marketing email, by writing to support@pecs.health. Depending on where you live you may have additional rights under state law, and we will honor them.

Children

This site and our services are for healthcare professionals and businesses and are not directed to children.

Changes and Contact

If we change this policy we will update the effective date above. Questions: support@pecs.health, or IntelliStem LLC d/b/a Provider Enrollment Credentialing Services, 122 Bright Street, Jersey City, NJ 07302.