Compliance & Ethics
PHI Protected · LiveAll billing, administrative functions, scheduling, calls, and records management are handled fully in-house on secure, federally certified systems. Your information never leaves our protected environment.
256
Bit Encryption
100%
In-House
24/7
Monitoring
Massage Healthcare of America Inc. is designated as a Covered Entity under HIPAA because we electronically transmit Protected Health Information (PHI) to insurance carriers for claims related to medically necessary therapeutic massage services, like lymphedema treatments and MSK care. This elevates our practice far beyond typical spa confidentiality, aligning us with professional healthcare providers through stringent federal privacy and security standards.
We prioritize your personal and health information with a highly advanced, cloud-based EHR platform, certified to the highest federal standards, including ONC Health IT and HITRUST validations, that fortifies PHI with ironclad safeguards like automatic data trace erasure after AI-generated notes and continuous security updates against cyber threats. No system is fully immune to sophisticated external hacks, but our proprietary technology — one of the nation's most sophisticated and widely adopted — invests heavily in cutting-edge protocols to deliver the strongest possible defense while enabling limitless secure storage.
When handling PHI for insurance billing or auto accident cases, we require patient consent via signed HIPAA authorization forms before sharing specifics with carriers or attorneys, ensuring only authorized data flows for legitimate purposes like payment.
This elite setup lets us focus purely on your outcomes, from manual lymphatic drainage to insurance-covered therapies, demonstrating our professionalism as a true healthcare partner. Your PHI stays locked down, accessible only as you permit — far exceeding spa norms.
The Seven Pillars
01 — Written Policies & Procedures
Massage Healthcare of America Inc. maintains a comprehensive HIPAA Policies and Procedures manual that governs the handling, storage, and disposal of all Protected Health Information (PHI). Our protocols are updated annually to remain in alignment with the latest federal healthcare regulations.
02 — Annual Risk Assessment (SRA)
We conduct a rigorous annual Security Risk Assessment using the HHS-approved SRA Tool. This proactive measure ensures that our administrative, physical, and technical safeguards remain bulletproof as we expand our clinical footprint across the nation.
03 — Business Associate Agreement (BAA)
To ensure a closed-loop of security, MHA Inc. maintains signed Business Associate Agreements (BAAs) with all third-party vendors, including our HITRUST-certified EHR provider. This legally ensures that your data is protected at every touchpoint, from our clinic to the cloud.
04 — Staff Training Logs
Every member of our clinical team — including our Registered Nurses, Kinesiologists, and Licensed Massage Therapists — undergoes mandatory annual HIPAA and Medical Compliance training. We maintain strict documentation of these certifications to ensure the highest standard of patient privacy.
05 — Privacy & Security Officer
MHA Inc. has a designated Privacy and Security Officer responsible for the implementation of our compliance program and the protection of patient rights. For privacy-related inquiries, patients may contact our compliance department directly.
06 — Notice of Privacy Practices (NPP)
Our Notice of Privacy Practices (NPP) describes how medical information about you may be used and disclosed and how you can get access to this information. You will be provided a copy of this notice at your first appointment, and it is available upon request at any time.
07 — Breach Notification Plan
In the unlikely event of a data compromise, MHA Inc. maintains a strict Breach Notification Procedure. We are committed to notifying affected individuals and the Department of Health and Human Services (HHS) within the legally mandated timeframes, ensuring total transparency and corrective action.
Patient-Facing Statement
As a HIPAA Covered Entity billing insurance for your medically necessary care, Massage Healthcare of America Inc. safeguards your PHI with an award-winning, federally certified EHR platform featuring AI-driven notes, instant data erasure, and unbreakable security updates. Your portal ensures full control, so we deliver expert therapy without distraction.
Notice of Privacy Practices
Effective Date: May 6, 2026
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
You have the right to request a copy of your medical records, ask us to correct your health record, and request confidential communications.
We typically use or share your health information to treat you (via physician referrals), run our organization (billing and claims), and bill for your services through our in-network partnerships with major payers like Aetna, Cigna, and United Healthcare.
We are required by law to maintain the privacy and security of your protected health information (PHI) and to notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
Patients may request a paper copy of this notice at any time during their visit.
A Unique Healthcare Infrastructure
MHA operates under its own corporate healthcare structure rather than being tied to the group NPI of a third-party physician group. This allows us to accept referrals from any licensed healthcare professional or provider nationwide, offering unparalleled accessibility for patients.
We do not hire general LMTs for clinical roles. Our staff consists of Registered Nurses and Kinesiologists who are also licensed in massage therapy and have undergone proprietary training in our In-House Academy.
We focus on medically necessary interventions, specifically Manual Lymphatic Drainage (MLD) and Decongestive Therapy for Lymphedema, as well as worker's compensation and sports recovery.
All clinical documentation is managed via an ONC and HITRUST-certified Electronic Health Record (EHR) system, ensuring your medical history is handled with the highest level of encryption and security available in modern medicine.
Phone & SMS Privacy
Contact Our Compliance Office
For questions regarding our privacy practices or our corporate structure, please contact our Privacy & Security Officer at Massage Healthcare of America Inc.
Phone
(775) 515-7770Fax (Medical Reports)
(775) 205-2105