Privacy Policy

1. About MedPath

MedPath is a healthcare career exploration and engagement platform designed to connect students and schools with healthcare professionals, organizations, speakers, educational opportunities, and career exploration resources.

MedPath is operated by the HEALS Foundation.

2. Information We Collect

Depending on how you use MedPath, we may collect:

Account Information

• Name
• Email address
• Account type or role
• School or organizational affiliation
• Profile information voluntarily provided by the user

Google Sign-In Information

If you choose to sign in using Google, MedPath may receive basic information associated with your Google Account, such as:

• Your name
• Email address
• Profile image, if available
• A unique Google account identifier

MedPath does not receive or store your Google password.

Unless MedPath specifically requests additional permissions and you authorize them, Google Sign-In does not provide MedPath with access to your Gmail messages, Google Drive files, contacts, calendar, or other private Google content.

Platform Activity

We may collect information about how users interact with MedPath, including:

• Programs or opportunities viewed
• Speaker or professional searches
• Requests and connections made through the platform
• Account activity
• Device and browser information
• IP address
• Log and diagnostic information

Information You Provide

We may also collect information users voluntarily submit through forms, profiles, applications, inquiries, registrations, surveys, or other MedPath features.

3. How We Use Information

MedPath may use information to:

• Create and manage user accounts
• Authenticate users
• Connect schools and students with healthcare professionals and organizations
• Facilitate healthcare career exploration and educational programming
• Process requests and registrations
• Communicate with users about MedPath activities and services
• Provide customer and technical support
• Improve platform functionality and user experience
• Understand participation and program utilization
• Maintain platform security and prevent misuse
• Comply with legal and regulatory requirements

MedPath does not sell personal information.

4. Google User Data

Information received from Google APIs is used only to provide and improve user-facing MedPath functionality that the user has requested or authorized.

MedPath’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

MedPath does not sell Google user data or use Google user data for targeted advertising.

Users may revoke MedPath’s access to their Google Account through their Google Account permissions and security settings.

5. Schools and Student Information

MedPath is designed in part to support healthcare career exploration for students.

Schools, school districts, educators, and partner organizations may provide or facilitate access to MedPath. When MedPath receives student information through participating educational institutions, we will use that information for authorized educational and program purposes.

MedPath does not knowingly use student personal information for targeted advertising.

Schools and districts may have additional privacy requirements governing student information. MedPath will work with participating educational institutions to comply with applicable agreements and legal requirements.

6. Children Under 13

MedPath is not intended for independent use by children under 13 unless participation is authorized and structured through a parent, legal guardian, school, school district, or other legally permitted educational arrangement.

MedPath does not knowingly collect personal information directly from children under 13 without appropriate authorization or consent when required by law.

If we learn that information has been collected from a child under 13 in a manner inconsistent with applicable law, we will take appropriate steps to delete or otherwise address the information.

Parents or guardians who believe MedPath may have collected information from a child improperly should contact us.

7. How Information May Be Shared

MedPath may share information when necessary to operate the platform, including with:

• Schools and educational institutions participating in MedPath
• Healthcare professionals or organizations when necessary to facilitate a requested connection or program
• Technology and service providers that support MedPath operations
• Government authorities or other parties when required by law
• Successor organizations in connection with a merger, restructuring, transfer, or similar organizational transaction

Service providers are permitted to process information only as necessary to provide services to MedPath and subject to applicable contractual and legal requirements.

We do not sell users’ personal information to data brokers or advertisers.

8. Data Security

MedPath uses reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No internet-based system can guarantee absolute security.

9. Data Retention

MedPath retains personal information for as long as reasonably necessary to operate the platform, provide programs and services, satisfy legal requirements, resolve disputes, maintain security, and fulfill legitimate organizational purposes.

Information that is no longer reasonably necessary will be deleted, anonymized, or otherwise handled in accordance with applicable requirements.

10. Your Choices and Rights

Depending on applicable law and the circumstances under which information was collected, users may request to:

• Access their personal information
• Correct inaccurate information
• Delete their account or personal information
• Withdraw certain permissions or consents
• Ask questions about how their information is being used

Requests may be submitted using the contact information below.

Certain information may need to be retained when required by law, necessary for security or fraud prevention, or otherwise permitted by applicable law.

11. Third-Party Services

MedPath may contain links to or integrate with third-party websites and services.

Those services operate under their own privacy policies and terms. MedPath is not responsible for the privacy practices of third-party services.

12. Changes to This Privacy Policy

We may update this Privacy Policy as MedPath evolves or as legal, regulatory, or operational requirements change.

When material changes are made, we will update the effective date and provide additional notice when appropriate.

13. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or personal information may be directed to: