Effective date: May 15, 2026
This Privacy Policy describes how CaseSherpa Ventures, LLC (“CaseSherpa,” “we,” “us,” or “our”) collects, uses, stores, and protects information in connection with the CaseSherpa care-coordination platform and the SMS communications we send to patients on behalf of their healthcare provider.
By creating a CaseSherpa account, providing your mobile phone number for SMS communications, or otherwise using our services, you agree to the practices described in this Policy. If you do not agree, do not use CaseSherpa or provide your mobile phone number for SMS communications.
CaseSherpa is a HIPAA-compliant care-coordination platform used by healthcare practices to manage patient care across multiple programs, including chronic care management, navigation, and procedure-pathway coordination. CaseSherpa operates as a Business Associate of partner healthcare providers under the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”).
CaseSherpa Ventures, LLC is a Mississippi limited liability company.
We collect the following categories of information:
We use the information described above to:
CaseSherpa sends SMS text messages to patients on behalf of their healthcare provider. SMS communications are sent only to patients who have explicitly opted in.
Patients opt in to receive SMS messages by submitting the online sign-up form at https://casesherpa.com/sms-signup/. To opt in, a patient provides their first name, last name, and mobile phone number, and explicitly checks a consent box authorizing CaseSherpa and their healthcare provider to send SMS messages related to their care. The consent checkbox is not pre-checked. SMS consent is always optional and is not required to enroll in or receive any clinical services.
Authorized SMS message content includes:
Most patients receive between 2 and 8 messages per month while actively enrolled in a care program. Frequency varies by program and stage of care. Standard message and data rates from your wireless carrier may apply.
CaseSherpa uses Twilio Inc. as our SMS delivery service provider. CaseSherpa maintains a Business Associate Agreement (BAA) with Twilio in compliance with HIPAA requirements for the handling of Protected Health Information.
Phone numbers collected for SMS communication are never sold, rented, or shared with third parties for marketing purposes. SMS opt-in data and consent information are not shared with any third parties.
You may opt out at any time by replying STOP to any SMS message from CaseSherpa. You will receive a one-time confirmation that you have been unsubscribed. After opting out, you will not receive further SMS messages from CaseSherpa unless you opt back in by replying START or by re-enrolling at the sign-up page above. For assistance, reply HELP to any message to receive contact information for your care team.
We do not sell your information. We share information only as described below:
Patient health information (“Protected Health Information” or “PHI”) is handled in accordance with HIPAA. CaseSherpa operates as a Business Associate of partner healthcare providers and processes PHI only as permitted by each provider’s Business Associate Agreement and applicable law.
All PHI is stored in encrypted databases. Access is restricted to authorized personnel, logged for audit, and reviewed periodically. CaseSherpa applies administrative, physical, and technical safeguards consistent with HIPAA’s Security Rule.
We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, role-based access controls, audit logging, and periodic security reviews. No method of electronic storage or transmission is 100% secure; if you believe your account or information has been compromised, please contact us immediately at admin@casesherpa.com.
We retain patient information for as long as you are enrolled in a care program with a partner healthcare provider, and afterward for the period required by the provider’s record-retention obligations and applicable law. SMS opt-out preferences are retained indefinitely so that we do not send messages to patients who have unsubscribed.
CaseSherpa is intended for use by adults (18+) or by legal guardians of minor patients enrolled by their healthcare provider. We do not knowingly collect information directly from children under 13. If you believe a child has provided us with information without parental consent, contact us at admin@casesherpa.com and we will delete it.
Our website uses a minimal set of cookies and standard server logs to operate the site and understand traffic patterns. We do not use third-party advertising trackers or sell visitor data.
We may update this Policy from time to time. The “Effective date” at the top reflects the most recent change. Material changes will be communicated through the platform or by other reasonable means. Your continued use of the platform or continued receipt of SMS messages after a change constitutes acceptance of the updated Policy.
Questions about this Policy or about your information?