Privacy Policy

Last updated: April 2, 2026

Overview

VA Health Prices is operated by Civic Health Data LLC, a West Virginia limited liability company. This policy explains what information we collect, how we use it, and your rights regarding that information.

We built this tool to make hospital price data accessible to everyone. We do not sell your data. We do not require you to create an account. We do not store personal health information of any kind.

Use of this Site is also subject to our Terms of Service.

Information We Collect

We collect the following limited information automatically when you visit this site:

Standard server logs: Like all websites, our hosting infrastructure (Cloudflare) automatically records basic request information including IP address, browser type, pages visited, and timestamps. This data is used for security monitoring and aggregate traffic analysis. It is not linked to any personal identity and is retained for 30 days.

Analytics (if enabled): We may use privacy-respecting analytics to understand which procedures and hospitals users search for most. This data is aggregate only — we cannot identify individual visitors.

We do not collect:

  • Names, email addresses, or contact information (no forms or accounts)
  • Health information, diagnoses, or treatment history
  • Insurance plan details
  • Payment or financial information
  • Location data beyond the general region inferred from your IP address

Cookies and Local Storage

This site does not use tracking cookies or advertising cookies.

We may use browser local storage to remember your preferences within a session (for example, your selected payer or coinsurance rate in the cost estimator). This data never leaves your browser and is not transmitted to our servers.

How We Use Information

We use the limited information collected to:

  • Operate and maintain the site
  • Monitor for security threats and abuse
  • Understand aggregate usage patterns to improve the tool
  • Comply with legal obligations

We do not use your information for advertising, marketing, or sale to third parties.

Data We Display

The hospital pricing data displayed on this site comes from publicly available machine-readable files published by hospitals under federal law (45 CFR § 180.50). We do not create, estimate, or modify this data. See our Data Sources page for full attribution.

This site is not a covered entity under HIPAA. We do not receive, transmit, or store protected health information (PHI). The prices displayed are published by hospitals and are not tied to any individual patient.

Third-Party Services

This site is hosted on Cloudflare’s infrastructure. Cloudflare’s privacy policy applies to data processed by their network: cloudflare.com/privacypolicy

We do not embed third-party advertising, social media tracking pixels, or analytics services that sell data.

Children’s Privacy

This site is not directed at children under 13 and does not knowingly collect information from children. The pricing data displayed is general hospital rate information, not health advice.

Your Rights

You have the right to:

  • Know what information we collect (described in this policy)
  • Request deletion of any server logs associated with your IP address by contacting us at the address below
  • Opt out of any analytics collection by using a browser with tracking protection enabled (Firefox, Brave, Safari with privacy settings, or any browser with uBlock Origin)

Since we do not collect personal accounts or health information, most data subject rights (access, portability, correction) do not apply — there is no personal profile to access or correct.

Contact

For privacy questions or deletion requests:
Civic Health Data LLC
contact@civichealthdata.com

For general questions about the data or methodology, see our About page and Data Sources page.

Changes to This Policy

We will update this policy if our data practices change. The “Last Updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.