Privacy Policy
This Privacy Policy explains how Carabel Inc. ("Carabel," "we," "us") collects, uses, and protects your information when you take part in our care-messaging program. Carabel is a care-team service that helps people recover after a hospital stay or procedure. We take your privacy seriously, and we hold health information to the standards described below.
We do not sell or share mobile opt-in information, consent, or phone numbers with third parties or affiliates for their marketing purposes. No mobile information is shared with third parties for marketing, ever.
Who we work on behalf of
Carabel operates this messaging program on behalf of your treating provider, your provider group, or your health insurance company (each, a "Covered Entity"). When we handle your health information, we act as a Business Associate of that Covered Entity under the Health Insurance Portability and Accountability Act (HIPAA), governed by a Business Associate Agreement (see "HIPAA and your health information" below). Text messages are sent from a Carabel number and identify your care team (for example, "Carabel — your care team from [your provider]").
Information we collect
- Your mobile phone number, so we can text you as part of the program.
- Identifying details such as your name and date of birth, used to confirm it is really you before any health information is shared.
- Recovery and care information you share with us — for example, how you are feeling, your responses to check-ins, and messages to your care team.
- Basic technical information needed to deliver messages reliably and keep the service secure.
How we use your information
We use your information only to operate the care-messaging program — to send recovery check-ins, appointment and medication reminders, and to connect you with your care team. We do not use your information for advertising or marketing, and we do not sell it.
HIPAA and your health information
Health information you share through Carabel is Protected Health Information (PHI) under HIPAA. We handle it as a Business Associate of your Covered Entity under a Business Associate Agreement (BAA). Under that agreement we use and disclose PHI only to provide the care-messaging service and as the agreement and law permit; we maintain administrative, physical, and technical safeguards to protect it; we limit access to people who need it to do their work; and we report any breach as the agreement and law require.
Text messages and your privacy
Standard text messages are not encrypted end-to-end and may be visible on your lock screen or to anyone who has your phone. Because of this, Carabel defaults to sending a secure link rather than health details in the text itself. You may choose to receive fuller messages by text; if you do, you can change that choice at any time, and that choice is re-confirmed periodically for your protection.
How we protect your information
We use encryption in transit, access controls, and audit logging to protect your information, and we keep it only as long as needed to provide the service and meet legal and recordkeeping obligations.
Your choices and rights
- Stop texts at any time by replying STOP. Reply START to resume, or HELP for help.
- Choose how much detail appears in your texts (a secure link versus fuller messages), and change it whenever you like.
- Access, correct, or request deletion of your information, subject to the rights and limits set by HIPAA and your Covered Entity.
Participating in text messaging is never a condition of receiving care. You can always reach your care team and read your messages securely in the Carabel app or web portal instead of by text.
Contact us
Questions about your privacy? Email privacy@carabel.ai, or for help with text messages email help@carabel.ai.
Carabel Inc.
56 Broad St STE 95447
Boston, MA 02109