Specialties

×
Physicians / MD-DO Nurse Practitioners (NP) Registered Nurses (RN) / Travel Nursing Telehealth / Remote / Virtual Jobs

States

×
California New York Texas Florida

Cities

×
San Francisco San Diego Sacramento New York City Albany Yonkers Houston Dallas Austin Miami Orlando Tampa
Privacy First

Candidate Data Policy

Transparent guidelines on how we collect, verify, process, and protect candidate profiles for top US healthcare recruitment.

Effective Date: June 27, 2026
HIPAA & CCPA Compliant
Version 2.4
Section 1

Scope & Candidate Information We Collect

MedCareerHub USA collects necessary, specific data sets from healthcare candidates to facilitate primary-source verification and matching with licensed US medical facilities, clinics, and hospitals. Our data collection is governed by strict compliance parameters tailored to the high demands of US medical staffing.

Professional Identity

Full legal name, contact credentials, SSN (last 4 digits only for credential matching), and NPI (National Provider Identifier) number.

Licenses & Boards

State professional medical board licensures, active registrations, DEA certificates, and clinical practice board specialties.

Medical Resume

Comprehensive history of employment, clinical rotations, case volumes, hospital privileges, references, and publications.

We do not collect sensitive clinical patient records or personal health information (PHI) of candidates, unless specifically requested under formal occupational health screenings mandated by hiring medical facilities (e.g., vaccine compliance records or titer results).

Section 2

How We Process & Verify Your Data

Processing candidate data on MedCareerHub USA serves the sole purpose of assessing professional suitability, credentials validation, and facilitating placement in appropriate US clinical roles.

Primary Source Verification: All professional credentials (e.g., medical licenses, Board approvals) are matched directly against databases of state boards, the National Practitioner Data Bank (NPDB), and the American Board of Medical Specialties (ABMS).

This automated and manual cross-checking protects patients, ensures healthcare safety, and guarantees that candidates have zero matching friction with future hospital human resource departments.

Section 3

Data Sharing Limits & Strict Hospital Review

Your privacy is absolute. We do not sell, rent, or lease candidate databases to third-party marketing companies. Data is shared exclusively inside a high-trust, audited network.

Recipient categories include exclusively:

  • Verified Healthcare Institutions: Accredited US hospitals, clinical groups, nursing homes, and private family practices looking to hire.
  • Credential Verification Partners: Official entities assisting with primary-source state licensing compliance checks.
  • Legal Compliance: Standard federal agencies if mandated by US laws (e.g., background checks, E-Verify, and visa processing).

Section 4

Data Security Architecture & US Hosting

MedCareerHub USA protects candidate portfolios with institutional-grade technology standards. Our architecture is designed around data minimization and strict defense-in-depth principles.

AES-256 Encryption

All candidate databases and file assets are stored with full AES-256 bit encryption at rest, and transmitted using secure TLS 1.3 tunnels.

Strict US Hosting

Candidate data rests entirely inside secure, geographically isolated US cloud facilities with SOC 2 Type II physical and logical security certificates.

Access control to databases is limited exclusively to authorized medical credential coordinators and recruiters on a strict "need-to-know" basis, monitored by regular automated audit trails.

Section 5

Your Privacy Rights (CCPA, HIPAA, State Laws)

Under CCPA, HIPAA, and general US state employment statutes, candidates seeking healthcare placements possess strong control rights over their personal and professional profiles.

These rights include:

  • The Right to Access: Request a complete, machine-readable export of all resumes, clinical licensing, and records stored in our portal.
  • The Right to Correction: Request immediate rectifications to licenses, expired certificates, or typo errors.
  • The Right to Deletion ("Erasure"): Erase all profiles, historical NPI matches, and job alerts when matching is no longer required.
  • The Right to Object / Opt-Out: Object to automated matchmaking parameters or pause active hospital recruitment profiles temporarily.

Section 7

The Candidate Data Security Lifecycle

MedCareerHub USA structures secure candidate data flow through five automated, high-integrity stages to keep information safe and fully verified.

Click each pipeline stage below to view detailed security mechanisms and auditing logs performed at that specific phase.

1
Ingress & Prep
Encrypted data submission and profile creation.
2
Verification
Direct matching against medical boards and NPI.
3
AI Matching
Accurate placement analysis on verified servers.
4
Hospital Review
Controlled profile matching to medical directors.
5
Safe Exit
Immediate, absolute profile scrubbing upon request.
Security Ingress (AES-256): When you upload your medical resume, credentials, or state license documents, they are securely parsed over TLS 1.3 encryption. Files are kept in locked virtual environments. Our parser runs automated static virus scans on every document to prevent cross-contamination.
Board Verification (SOC 2): Your credentials are cross-referenced directly with state databases and the National Practitioner Data Bank (NPDB). This stage operates with total technical logging, so both candidates and future employers can trace verified status reports securely. No data leaves US boundaries.
AI Matching Engine: Our algorithms scan professional qualifications against specific hospital vacancy profiles. Data matching remains client-authoritative. We do not use third-party broker algorithms, and matching data is processed in private secure modules.
Hospital Review Protocol: Profiles are unlocked exclusively for certified, accredited medical recruiting leads who have executed strict data processing addendums (DPAs) with MedCareerHub USA. Medical institutions cannot export or copy bulk records.
Strict Exit scrubbing: When you execute your right to deletion, your documents, active boards information, license references, and chat logs are immediately scheduled for a hard wipe across all backup arrays. Exit confirmations are delivered within 48 hours.
Section 8

Frequently Asked Questions (FAQ)

Read quick answers regarding HIPAA protocols, licensing verification, and general data preservation limits on our recruitment platform.

Is MedCareerHub USA fully compliant with HIPAA? ▼
Yes. While HIPAA primarily governs Patient Health Information (PHI), we voluntarily align our data infrastructure with full HIPAA security and technical standards. All candidate health compliance documentation (such as mandatory vaccinations, titer certifications, and health screens) are stored separately with access keys restricted strictly to authorized occupational healthcare administrators.
Can hospitals access my data without my explicit approval? ▼
No. We operate under a strict permission-based matching pipeline. Medical institutions only see redacted professional metrics (such as specialties, general location, and board status) until you explicitly authorize profile sharing for a specific vacancy.
How long do you keep my profile data if I am inactive? ▼
We automatically archive inactive accounts after 18 months of zero portal log-ins. If you remain inactive for 24 months, we send a notification prompting you to keep your credentials up to date. If no response is received, all sensitive identification files, resumes, and NPI histories are permanently and securely deleted from active storage.
Does MedCareerHub USA share candidate data with third-party brokers? ▼
No. We stand firmly against third-party medical data brokerage. Candidate information is only parsed to help direct placements between registered candidates and accredited US medical organizations. We enforce strict non-disclosure terms with all partner clinics.
Data Access & Controls

Submit a Candidate Data Request

Exercise your privacy rights directly. Submit a query to our Data Protection Officer to access, export, modify, or completely wipe your credentials.

Click to choose or drag-and-drop license PDF or identity card
PDF, PNG, JPG up to 10MB
filename.pdf uploaded successfully!

No matching policy sections found

Try searching for terms like "HIPAA", "NPI", "CCPA", or "Verification".

✓
Preferences saved successfully!