Privacy policy

Last updated October 10, 2026. support@ehrgigs.com

Just a fellow EHR consultant trying to make the job search easier :) This page says what I store and what I don’t.

Text messages

Mobile numbers and text opt-in data are not shared or sold to third parties for marketing.

If you opt in at /sms, I keep the mobile number, the consent sentence, the time you agreed, the time zone, and the time you reply STOP, so I can send job-alert texts and honor STOP. That opt-in record is used to run the text program. It is not shared with advertisers, data brokers, or other companies for their own marketing. Carriers and the texting vendor (Twilio) only handle delivery. Consent is not a condition of purchase. You can opt out by replying STOP. See the terms for the program rules.

What the extension reads

I read a job page only after you click the EHR Gigs icon. I don’t scrape in the background, and LinkedIn is never crawled on a timer. From that page I keep what you save: title, company, rate, location, remote or not, contract or FTE, the EHR and the apps, the link, a posted date (or the day you first saved it), and the notes you type. Epic is the default. Oracle Health (Cerner), MEDITECH Expanse, and TruBridge (formerly CPSI) are the other ones I tag.

On your computer

Until you turn off local mode, the board stays in this browser. I don’t receive the CSV you export.

If you sign in

Magic-link email goes through Supabase. I store your email, the modules you pick, the board you sync, and which plan you’re on. Those rows are limited to your account.

Payments

Stripe handles the card. I don’t see the card number. I store the plan: free, pro, plus, or lifetime. If you pause a subscription, I store that it’s paused and the resume date you picked, if you picked one. Your saved gigs stay on the account.

Listings

A public role page shows the company and the role once the listing is old enough for the free plan. For two days after the posted date, the page keeps the posted date and the app, and leaves the role and the firm off. The first day is held for the $10 plan. The server omits those fields. It does not rely on hiding them in the browser. A recruiter’s name, phone, and work email stay off those pages unless that person opts in and writes the line they want shown. I send a verification code only when the work email matches the firm’s website. Free inboxes don’t get that code. A request from someone without a company domain stays in the owner queue, not on the public card. I don’t put a named person’s contact on a listing I typed in by hand. If a firm looks thin, I hold its posts and keep the reasons in the owner queue. I look at the public website and the domain registration date, and I don’t store the page body.

Contact

support@ehrgigs.com