Your information.
Your privacy.

ScribeHelp™ is a product of iDeate Solutions LLC.

Information we handle

Website inquiries may include your name, email, practice and message. The ScribeHelp application handles account details, patient identifiers, encounter recordings, transcripts, clinical notes, coding suggestions and activity records needed for its workflow.

How information is used

We use information to operate and support the service, answer inquiries, maintain security and improve our services. Service providers, including cloud and communication providers, may process information to deliver these functions. iDeate does not sell personal information.

Your practice and your choices

Practices are responsible for authorized submissions and required recording consent. Providers review generated clinical output before use. Do not send patient information through the public contact form or ordinary email.

Optional website analytics and advertising are controlled through Cookie settings. See our cookie information for details. These marketing-site settings are separate from the clinical application.

ScribeHelp EHR Connect browser extension

ScribeHelp EHR Connect is a Chrome extension provided by iDeate Solutions LLC. It helps authorized users retrieve reviewed ScribeHelp clinical notes and insert their text into a supported electronic health record (EHR) draft. It requires a registered organization and an assigned ScribeHelp account.

Information the extension handles

The extension handles your organization selection, account identifier, display name, role and authentication tokens. It also handles patient names, patient identifiers, dates of birth when available, visit details, provider information, search terms, reviewed clinical-note text, and transfer and reconciliation records needed for the workflow. Clinical notes can contain sensitive health information.

To validate the destination and the insertion, the extension checks the selected browser tab's address and title, the supported note editor and whether it is blank, and the text inserted into that editor. Addresses or page titles can themselves contain patient-related information. This access supports the note-transfer workflow. The extension does not collect a general history of the websites you visit.

The extension does not record encounter audio or perform transcription. Those are separate ScribeHelp application functions.

How the information is used

Information is used to identify and connect to your organization, authenticate you, enforce your role and note access, find reviewed notes, check the intended supported draft, perform an insertion you request, and maintain shared transfer history and duplicate-transfer protection. Session activity times support inactivity and overall session limits. The extension does not record raw keystrokes, mouse coordinates or a general browsing clickstream.

The extension's organization directory receives the organization code you enter and returns approved connection metadata. Its registration entries do not contain patient records or clinical notes. Requests to the directory, sign-in service and backend also expose ordinary network information, such as your IP address, to the receiving service. Infrastructure and security logs may record network addresses, request/action metadata, identifiers and timestamps for operating and securing the service. The extension does not implement GPS or geolocation tracking.

Where information goes

The selected organization's ScribeHelp deployment receives searches, authentication/session requests and transfer-related requests. Its authorized users can access records according to their assigned permissions. Amazon Web Services (AWS), including Amazon Cognito for sign-in, provides hosting and authentication for the current supported deployments. Sign-in credentials are entered with the organization's authentication service; the extension uses issued tokens rather than storing your password.

When you confirm an insertion, the selected clinical-note text is placed into the EHR draft you opened. Carepatron is the initially supported EHR. That EHR processes and retains the note under the practice's arrangements and its own applicable terms and privacy practices. The extension cannot confirm that an EHR draft has been saved or signed.

If you choose Manual copy, the reviewed note is written to your device's system clipboard. Other software with clipboard access may be able to read it. Signing out of the extension does not erase the clipboard or remove text already inserted into an EHR.

Browser storage and retained records

The extension remembers your organization code in local browser storage. Chrome separately maintains the permissions you grant. Authentication tokens, note previews, destination checks and temporary display information use extension browser-session storage. Previews and destination authorizations have short validity limits. Signing out or changing organization clears authentication and patient-linked workspace display information. Some session-only transfer identifiers, status records and duplicate-protection metadata can remain for the browser session.

Clinical records, shared transfer history, audit/security records and backend session records are separate from the temporary browser workspace. The current reference deployment has no automatic deletion schedule for clinical records, shared transfer history or backend session records. Your organization sets the applicable clinical-record retention schedule. Authorized deletion requests are reviewed through our record-management process, including applicable holds and residual copies. Records remain retained until handled through that process, subject to the selected organization's applicable retention, backup and legal requirements. Backups, logs and historical object versions are handled separately. Closing the extension, signing out or uninstalling it does not delete these backend records or records saved in an EHR. Contact your practice for its applicable retention and record-management arrangements.

Permissions, security and your choices

The extension uses Chrome's sign-in window and side panel, session/local storage, scheduled maintenance, and access to the EHR tab you explicitly activate. It requests permission for the selected organization's approved service addresses when that access is missing. Chrome controls its own permission prompts. You may manage permissions or remove the extension through Chrome settings.

Connections to organization services use HTTPS. Session limits, destination checks and backend permissions restrict access and transfer actions. You remain responsible for using an authorized device, confirming the patient and encounter, and reviewing and saving the note in the EHR.

Limited use

ScribeHelp EHR Connect's handling of user data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used for the disclosed note-transfer functionality and its necessary operation and security. We do not sell extension user data, use it for advertising or credit decisions, or transfer it for unrelated purposes. The extension contains no advertising or analytics SDK.

The current application's support role permits organization-wide read access; it does not enforce case-by-case approval or automatic expiry of support access. Vendor support access requires documented authorization for a specific purpose and scope, a named authorized operator and an approved access window. Temporary access is removed and its removal verified at the end of the approved window through our operating procedures. Access needed for security investigations or legal requirements is handled through a separate documented process. These procedures are separate from technical role permissions. Required service-provider processing and access by your practice's authorized users support the disclosed clinical workflow.

For privacy questions or requests concerning iDeate's handling of information, contact support@ideatesol.com. For patient records held for your practice, contact the practice first. Website marketing-cookie settings are separate from the extension's clinical workflow.

Questions and requests

To request access, correction or deletion of personal information, contact support@ideatesol.com. Requests are reviewed under applicable law, and identity verification may be needed. For patient records held for a practice, contact that practice first.

Read iDeate Solutions LLC’s Privacy Notice and Terms of Service. Product-specific service terms and any applicable Business Associate Agreement (BAA) should be reviewed alongside these pages.

Related information: Privacy · Retention · Security · Cookies