We never ask for, see, or store PHI.
Not patient names. Not DOBs. Not claim numbers. Not diagnoses. Not encounter notes. Our entire dataset is composed of public business identifiers (NPI) and public commercial rates (federal MRF filings). HIPAA-aligned by architecture, not by policy.