Your privacy, plainly stated
IV Locator is a directory — we connect you with providers, we don't collect or store health information. Here's exactly what we do and don't do with your data.
Encrypted in transit
All traffic uses HTTPS (TLS 1.3). Every connection to this site is encrypted end-to-end.
Encrypted at rest
Provider and inquiry data is stored in Supabase, AES-256 encrypted at rest.
No health data stored
We are a directory, not a health platform. We never store treatment, medical, or health records.
What we collect
When you browse
- Anonymous page views via Cloudflare Web Analytics (no cookies, no cross-site tracking)
- We do not use Google Analytics or Facebook Pixel
- No personal information is collected just for browsing listings
When you contact a provider
- Name and email (so the provider can respond)
- Your message to the provider
- We do not store health conditions, treatment details, or medical history
If you list a practice
- Business name, address, contact info, and service details (displayed publicly)
- Your email (for account and listing management, not displayed publicly)
- Payment details via Stripe — we never see or store card numbers
HIPAA notice
IV Locator is a directory service, not a healthcare provider or covered entity under HIPAA. We do not create, receive, maintain, or transmit protected health information (PHI) on behalf of healthcare providers. When you contact a provider, you communicate directly with them — please review their HIPAA policies for how they handle your health information.
Infrastructure
IV Locator is hosted on Cloudflare Pages with Cloudflare's WAF and DDoS protection active. Provider data is stored in Supabase (SOC 2 Type II certified, US-hosted PostgreSQL, encrypted at rest and in transit).
Payments
Featured listings are billed via Stripe (PCI DSS Level 1 certified). We receive a payment confirmation token — your card details never touch our servers.
Who can see your data
- IV Locator team — for support and operations only
- The provider you contact — your name, email, and message
- Supabase and Cloudflare — infrastructure, bound by their own DPAs
- Stripe — payment processing only
- No one else — we do not sell data or run retargeting
Your rights
- Access — what data we have about you
- Deletion — delete your account and associated data
- Correction — fix inaccurate information
- Opt-out — stop receiving emails from us at any time
Email us at hello@ivlocator.com. We respond within 5 business days.
Questions?
Contact: hello@ivlocator.com
Last updated: February 2026