PRP Atlas ("we," "us") operates this directory at www.prpatlas.com. This policy covers the public directory, the guides section, and the practice claim form. It does not cover any third-party site you reach by clicking a link from here — a clinic's own website, a Google Maps listing, or a source cited in a guide.
Questions about this policy or a request about your data: hello@prpatlas.com.
You can search, browse, and read every listing and guide on this site without submitting any personal information. Browsing itself is measured by Vercel Analytics, which is cookieless — it does not set a cookie, assign you an identifier, or track you across sites. It records page views and referring pages in aggregate.
We also use Vercel Speed Insights to measure real page-load performance, on the same cookieless basis.
We also use Google Analytics 4 to understand how the directory is used — which pages people visit, how they arrived (for example, from a search engine), and roughly where they are. Unlike Vercel Analytics, Google Analytics does set cookies in your browser (named _ga and _ga_ followed by an ID) to tell one visit from the next. Google receives your browser and device details, the pages you view, and your IP address, which it uses to estimate your general location; Google states that Google Analytics 4 does not log or store IP addresses. We see this only as aggregated reports — not as a record of you personally.
We do not run advertising pixels, and we do not sell visitor data. You can block Google Analytics by refusing or clearing cookies in your browser, by using a content blocker, or with Google's Google Analytics opt-out browser add-on. Blocking it does not affect anything you can do on this site. How Google handles this data is described in How Google uses information from sites that use its services.
The claim form asks you to type in personal information: your name, role, work email, phone number (optional), the NPI you assert is yours (optional), and any message you add. We also record the IP address the submission came from. That's not something you type in — it's used only to limit automated or repeated submissions to this form, and is not used to identify or track you for any other purpose.
What we do with it: a claim is reviewed by hand before anything changes on the listing. We use your email and phone only to verify you're actually connected to the practice and to follow up about the claim. We never publish your name, email, or phone number anywhere on the site — the listing itself doesn't change until we approve the claim, and even then, only ownership and commercial tier are set. A stated NPI is recorded as your assertion, not independently verified — we do not currently re-check it against the CMS registry when a claim is processed, and it is never published just because you typed it in.
Claim submissions are stored in a database table with no public read access — the public site's own key cannot see this data, and it is visible only to us. A summary of the claim (not stored contact details) is also sent to our internal notification tool, GoHighLevel, so our team is alerted to review it; see "Who else sees this data" below.
Some listing pages embed a patient inquiry form so you can reach the practice directly. Submitting it sends your information to GoHighLevel, the third-party tool that hosts the form and routes it to us and, for practices that have claimed their listing, to that practice. This is a separate flow from the claim form above, and the fields you type there are governed by that tool, not stored in our own database.
We use GoHighLevel (GHL) as our lead- and claim-notification processor — it's what powers the patient inquiry form on listing pages and the internal alert we get when a claim is submitted. GHL receives what you submit through those two flows; it does not have direct access to our database or to any other visitor data on this site.
Google receives browsing data through Google Analytics, as described above. Vercel, which hosts this site, processes the page requests your browser makes, as any web host does.
Listings on this directory are built from public sources: a clinic's own website, its Google Business listing, and the CMS National Plan & Provider Enumeration System (NPPES), which is a public federal registry. We do not publish a clinic's private contact email — where we hold one on file, it is kept separately and is not exposed through the public site.
If a listing is about your practice and something is wrong, you can claim it to correct the details, or email us directly.
We do not sell personal information to anyone. We do not share claim-form data with the practices you're claiming, with data brokers, or with advertisers. We don't use your data to train any model.
Claim submissions are retained for as long as needed to process the claim and keep a record of who owns a listing. You can ask us to see, correct, or delete the personal information you've submitted by emailing hello@prpatlas.com — we'll respond and act on a verified request within a reasonable time.
If this policy changes in a way that matters — a new tool that sets cookies, a new way we use your data — we'll update the date at the top of this page. This is a working policy for a small, actively developed site, not a substitute for legal advice; if you have a specific compliance question, talk to a lawyer.