Badge Health Privacy Policy
Last Updated / Effective Date: November 3, 2026
Badge Health LLC, a Pennsylvania limited liability company (“Badge Health,” “we,” “us,” or “our”) operates an online marketplace that connects licensed nursing professionals with healthcare facilities seeking to fill open shifts. This Privacy Policy explains what personal information we collect, how we use it, when we disclose it, and the choices you have.
This Privacy Policy is incorporated into the Badge Health Terms of Use. Capitalized terms not defined here have the meanings given in the Terms of Use.
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use it for targeted advertising.
1. Who this Privacy Policy covers
This Privacy Policy applies to:
Nursing Professionals — licensed or certified nursing professionals who register for an account to view, request, accept, and perform Shifts;
Customers — healthcare facilities that register for an account to post Shifts, and the Authorized Representatives who use the Platform on their behalf; and
Visitors — anyone who visits our website or mobile application without registering.
The Platform is offered in Pennsylvania and is intended only for individuals who are eighteen (18) years of age or older.
2. Information we collect from Nursing Professionals
Registration and profile information. Name, mailing address, email address, telephone number, and profile photograph if you choose to provide one.
Identity documents. Photographs you upload of a government-issued identification document: the photo page of a passport, or the front and back of a driver’s license or state identification card. Badge Health personnel review these images to verify your identity and record the type of document. We do not use them for facial recognition or other biometric processing. They are stored with our cloud hosting provider, are accessible only to you and to authorized Badge Health personnel, and are not disclosed to Customers. If you delete your account and no records must be retained under Section 12, we delete them; otherwise we retain them as described in Section 12.
Professional information. License and certification type and number, issuing board and jurisdiction, expiration and renewal dates, disciplinary and status information, education, work history, specialties and competencies you report, and the geographic areas and shift types you are willing to work.
Screening information. The results of licensure verification and the criminal history, registry, exclusion, and sanction screening described in Section 7.
Payment and tax information. Bank account or payment card details collected by our payment processor, Social Security number or taxpayer identification number for Form 1099 reporting, and records of amounts paid to you.
Assignment-specific health information. Where a facility requires evidence of immunization, tuberculosis screening, physical examination, drug screening, or fitness for duty as a condition of an assignment, we request that information only after you have accepted a Shift. We use it only to confirm that the facility’s requirements for that assignment are satisfied, and we keep it in a file separate from your other account information.
Activity information. Shifts you view, request, accept, decline, and complete; cancellations and no-shows; hours recorded and confirmed; messages sent through the Platform; and support requests. When you clock in, a photograph you take of the facility entrance and your device’s location at that moment, used to confirm that you arrived at the facility.
3. Information we collect from Customers and Authorized Representatives
Facility name, address, license number and type, and units or care areas; the names, titles, work email addresses, and work telephone numbers of Authorized Representatives; billing and payment information; Shift listings and their requirements; time confirmations and disputes; feedback and do-not-return requests; and support requests.
4. Information we collect automatically
When you use the Platform we automatically collect device identifiers, IP address, browser and operating system type and version, mobile device type, referring and exit pages, pages and screens viewed, dates and times of access, crash and diagnostic data, and approximate location derived from IP address.
If you enable it, we collect precise geolocation from your mobile device for the limited purpose of showing you nearby Shifts and, where a facility uses geofenced clock-in, confirming that you are on site at the start and end of a Shift. You can turn precise location off at any time in your device settings. Turning it off may limit some features but will not prevent you from using the Platform.
5. Information we collect from third parties
We receive information about you from our screening vendors and primary source verification services, from state licensing boards and the Nursys licensure database, from federal and state registries and exclusion lists, from our payment processor, from Customers (including time confirmations and performance feedback), and from analytics and error-reporting providers.
6. Protected health information
The Platform is not designed or authorized to receive protected health information, and we do not knowingly collect it. The Terms of Use prohibit Nursing Professionals and Customers alike from transmitting any patient or resident information through the Platform, including names, room numbers, medical record numbers, diagnoses, acuity levels, clinical or handoff notes, incident reports, census or assignment sheets, and photographs.
Because we do not create, receive, maintain, or transmit protected health information on behalf of any Customer, Badge Health is not a business associate of any Customer within the meaning of 45 C.F.R. § 160.103. If protected health information is transmitted to us in breach of the Terms of Use, we will delete it, and we may deploy automated controls to detect and purge it.
The assignment-specific health information described in Section 2 is information about you, collected in connection with your engagements. It is not protected health information subject to HIPAA, but we treat it as sensitive and restrict access to it.
7. Background screening information
We obtain consumer reports and, where applicable, investigative consumer reports about Nursing Professionals through third-party consumer reporting agencies, subject to the federal Fair Credit Reporting Act. We provide the separate written disclosure and obtain the separate written authorization that law requires before obtaining any report.
We use screening information only to determine eligibility to hold an account and to accept Shifts, and to satisfy our and our Customers’ legal obligations. We do not apply automatic or categorical disqualification rules, and we conduct an individualized assessment where a record is reported.
Where Pennsylvania law requires it, we disclose criminal history record reports and clearances to the facility at which you request, accept, or perform a Shift, and to governmental authorities entitled to receive them. We do not provide facilities with any assessment, rating, score, or recommendation concerning your suitability, competence, or fitness.
If we take adverse action based in whole or in part on a consumer report, we provide pre-adverse action notice with a copy of the report and a summary of your rights under the Fair Credit Reporting Act, an opportunity to dispute the accuracy or completeness of the information, and adverse action notice thereafter.
8. How we use personal information
We use personal information to create and administer accounts; verify identity, licensure, and eligibility; match Nursing Professionals with Shifts and present Shift listings; facilitate confirmations, cancellations, and timekeeping; process payments and issue tax forms; invoice and collect from Customers; provide customer support; investigate complaints, safety concerns, and suspected fraud or misuse; operate, secure, maintain, troubleshoot, and improve the Platform; produce aggregated and de-identified analytics; send transactional and operational communications; send Platform-related marketing communications to Customers and Nursing Professionals, which you may opt out of at any time; and comply with legal obligations, including recordkeeping, licensure, tax, and regulatory reporting requirements.
9. When we disclose personal information
To Customers. When you request or accept a Shift, we disclose to that Customer your name, contact information, profile, licensure and credential status, the fact and date of your verification and screening, and, where required by law, your criminal history record report and clearances.
To Nursing Professionals. We disclose to Nursing Professionals the Customer’s facility name and address, the Shift Terms, and the contact information needed to perform a confirmed Shift.
To service providers. We disclose personal information to vendors that perform services for us — hosting and cloud infrastructure, screening and verification, payment processing, communications and messaging, customer support, analytics, and error reporting. They are contractually limited to using it only to provide services to us.
To governmental authorities and regulators. Including the Pennsylvania Department of Health, the Department of Aging, the Department of Human Services, the State Board of Nursing, and taxing authorities, where required or permitted by law.
For legal reasons. To comply with law, subpoena, court order, or other legal process; to enforce our Terms of Use; to protect the rights, property, or safety of Badge Health, our users, or others; and to investigate or prevent fraud, abuse, or unlawful activity.
In a business transaction. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to the recipient’s agreement to handle the information consistently with this Privacy Policy.
With your direction. Where you ask us to.
We do not sell personal information, and we do not disclose it to third parties for their own marketing purposes.
10. Cookies, analytics, and Do Not Track
We use cookies, local storage, software development kits, and similar technologies that are strictly necessary to operate the Platform — to keep you signed in, remember your preferences, maintain session security, and prevent fraud — and to understand how the Platform is used so we can improve it.
We do not use advertising cookies or pixels, we do not permit third-party advertising networks to collect information through the Platform, and we do not engage in targeted advertising or cross-context behavioral advertising.
Because we do not track users across third-party websites for advertising, we do not respond differently to browser Do Not Track signals or to Global Privacy Control signals. You can control cookies through your browser settings; disabling strictly necessary cookies will prevent parts of the Platform from working.
11. Communications and call recording
By registering, you consent to receive communications from us electronically, including by email, SMS or text message, push notification, and telephone, concerning your account, Shifts, payments, credentials, and this Privacy Policy and the Terms of Use. Message and data rates may apply, and you can stop text messages by replying STOP.
You may opt out of marketing communications at any time using the unsubscribe link or by contacting us. You cannot opt out of transactional and operational messages while your account is active, because we need them to operate the Platform.
Pennsylvania is an all-party consent state for the recording of communications. 18 Pa. C.S. §§ 5701 et seq. We do not record telephone calls unless we tell you at the outset of the call and obtain your consent.
12. How long we keep personal information
We keep personal information for as long as your account is active and thereafter for as long as needed for the purposes described in this Privacy Policy or as required by law. Some retention periods are set by law and are longer than you might expect:
Staffing agency records — Pennsylvania requires temporary health care services agencies to retain specified records for ten (10) years and to make them immediately available to the Department of Health. 35 P.S. § 448.803-B(a)(8).
Background screening records — retained consistent with the Fair Credit Reporting Act and applicable federal recordkeeping rules.
Payment and tax records — retained for the periods required by federal and Pennsylvania tax law.
Records subject to a legal hold — retained until the hold is released.
When information is no longer needed, we delete it or de-identify it. We may keep aggregated and de-identified data indefinitely.
13. Security
We maintain administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, and destruction. These include encryption of data in transit and at rest, access controls and role-based permissions, logging and monitoring, vendor diligence and contractual safeguards, and employee training.
No system is perfectly secure, and we cannot guarantee the security of information transmitted to or from the Platform. You are responsible for keeping your account credentials confidential and for notifying us immediately of any unauthorized use of your account.
14. Notice in the event of a breach
If personal information is subject to a security breach, we will notify affected Pennsylvania residents as required by the Pennsylvania Breach of Personal Information Notification Act, 73 P.S. §§ 2301 et seq.
Where that Act applies and we are required to notify you, and we reasonably believe that your Social Security number, bank account number, or driver’s license or state identification card number was accessed, we will provide you at no cost with access to one credit report, if one is not already available to you free of charge, and with twelve (12) months of credit monitoring, or with notice of how to obtain it free of charge. 73 P.S. § 2305.4.
Where more than five hundred (500) Pennsylvania residents must be notified, we will notify the Pennsylvania Office of Attorney General at the same time, and we will notify the nationwide consumer reporting agencies as required. 73 P.S. §§ 2303(c.1), 2305.
15. Your choices and rights
Pennsylvania has not enacted a comprehensive consumer data privacy statute. We nonetheless offer the following to everyone who uses the Platform:
Access. You may request a copy of the personal information we hold about you.
Correction. You may correct most profile, licensure, and contact information directly in your account, and you may ask us to correct anything else that is inaccurate.
Deletion. You may request that we delete your personal information. We will do so except where we are required to retain it by law — including the ten-year staffing agency retention requirement in Section 12 — or where we need it to complete a transaction, resolve a dispute, enforce our agreements, or comply with a legal hold.
Marketing opt-out. You may opt out of marketing communications at any time.
Account deactivation. You may request deactivation of your account at any time.
Complaints. If you are not satisfied with how we handled your request, you may contact us at the address in Section 19. Pennsylvania residents may also contact the Pennsylvania Office of Attorney General, Bureau of Consumer Protection.
To make a request, contact us using Section 19. We will verify your identity before acting on a request, and will respond within a reasonable period and in any event within forty-five (45) days. We will not discriminate against you for exercising any of these rights.
Rights under the Fair Credit Reporting Act are separate and additional. You may dispute the accuracy or completeness of information in a consumer report directly with the consumer reporting agency that prepared it, and you may obtain a copy of your file from that agency.
16. Children
The Platform is not directed to children, and we do not knowingly collect personal information from anyone under eighteen (18) years of age. If we learn that we have collected information from someone under eighteen, we will delete it.
17. Third-party services and links
The Platform integrates with and links to services operated by third parties, including our payment processor and screening vendors. Those services have their own privacy policies, and this Privacy Policy does not apply to them. We encourage you to read them.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, if the changes are material, notify you by email, by in-application notification, or both before they take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.
19. How to contact us
Badge Health LLC
1800 Rockaway Ave., Suite 210
Hewlett, NY 11557
(347) 930-4119