Effective Date: January 1, 2024  |  Last Updated: August 7, 2026

RCM Xpert is a HIPAA-compliant medical billing and revenue cycle management company. We collect only the information needed to operate this website and to support the billing services we provide under signed client agreements, and we never sell your personal information.

HIPAA and PHI Compliance

RCM Xpert operates in accordance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable state privacy and data-breach notification laws.

Protected Health Information (PHI) that RCM Xpert receives from healthcare providers in the course of billing, coding, credentialing, claim submission, and revenue cycle services is used solely to perform those services, and is handled under the safeguards described in Data Security below and the Business Associate Agreement referenced in the next section.

This website’s contact and inquiry forms are separate from PHI handling: information you submit through this website (name, business contact details, and the content of your message) is not PHI unless you choose to include patient-identifiable information in a message, which we ask visitors not to do.

Business Associate Agreement (BAA)

As a HIPAA Business Associate, RCM Xpert enters into a Business Associate Agreement (BAA) with every Covered Entity — healthcare provider, practice, or facility — before performing billing or revenue cycle services on their behalf. The BAA formalizes how PHI is used, disclosed, and safeguarded, and sets out breach-notification obligations consistent with HIPAA and HITECH.

If your organization requires a copy of RCM Xpert’s standard BAA for review, contact us using the details at the end of this page.

Information We Collect

Information submitted directly to us. When you fill out a contact form, request a free billing audit, or otherwise reach out through this website, we collect the information you provide, which may include your name, business or practice name, phone number, email address, and the content of your message.

Information collected automatically. Like most websites, we automatically collect limited technical information when you visit, including IP address, browser type, device type, referring pages, and general usage patterns, through standard analytics and site-optimization tools. See Cookies and Tracking Technologies below.

Client and PHI data. Protected Health Information and other data RCM Xpert receives while performing billing, coding, credentialing, or revenue cycle services for a client is collected and used strictly under that client’s signed services agreement and Business Associate Agreement, not under this website’s general intake process. See HIPAA and PHI Compliance and Business Associate Agreement above.

How We Use Information

We use information submitted through this website to respond to inquiries, schedule a free billing audit, provide requested information about our services, and improve the website experience.

We use client and PHI data exclusively to perform the billing, coding, credentialing, and revenue cycle functions described in the applicable services agreement and BAA, including claim submission, eligibility verification, denial management, payment posting, and related administrative functions.

We do not use website-visitor information or client PHI for advertising, do not build advertising profiles from it, and do not sell it.

Information Sharing and Disclosure

RCM Xpert does not sell, rent, or trade your personal information or PHI. Information is shared only in the following circumstances, and always following HIPAA’s Minimum Necessary Standard so that only the information required for the purpose is disclosed:

•     With insurance payers and clearinghouses, to submit and follow up on claims on a client’s behalf
•     With subcontracted vendors who perform functions on our behalf under their own signed Business Associate Agreements (for example, secure hosting or clearinghouse connectivity)
•     With government or regulatory agencies, when legally required
•     With a client’s own staff and systems, as directed by that client

Third-party links on this website lead to sites with their own privacy policies. RCM Xpert has no responsibility or liability for the content or privacy practices of linked sites.

Data Security

RCM Xpert maintains administrative, technical, and physical safeguards designed to protect personal information and PHI from unauthorized access, disclosure, alteration, or destruction, consistent with the HIPAA Security Rule. These include encrypted transmission of electronic PHI, access controls limiting data access to personnel who need it to perform their role, and ongoing staff training on privacy and security practices.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If RCM Xpert becomes aware of a breach affecting your information, we will notify affected parties as required by HIPAA, HITECH, and applicable state law.

Data Retention

We retain billing and healthcare-related records only for the period required by law, regulation, or the terms of the applicable services agreement. Website-visitor information submitted through contact or audit-request forms is retained only as long as needed to respond to your inquiry, unless you become a client, in which case retention follows the applicable services agreement. When retention is no longer required, data is securely deleted or destroyed.

Your Privacy Rights

Depending on your state of residence, you may have rights regarding your personal information under applicable state privacy law, which can include the right to know what information we hold about you, request correction of inaccurate information, request deletion, and opt out of certain uses. Where HIPAA governs the information (PHI handled on behalf of a healthcare provider client), your rights to access or amend that information are exercised through the provider, consistent with HIPAA’s Privacy Rule, since RCM Xpert holds that data as a Business Associate rather than the Covered Entity.

To submit a privacy rights request, contact us using the details at the end of this page. We will respond within the timeframe required by applicable law.

Text Messaging (SMS) Communications

If you provide your mobile number and opt in to receive text messages from RCM Xpert, that consent and the associated originator opt-in data are used only to send you the messages you agreed to receive. Text messaging originator opt-in data and consent are never shared with third parties or affiliates for marketing or promotional purposes. You may opt out of text communications at any time by replying STOP.

Cookies and Tracking Technologies

This website uses cookies and similar technologies to support core functionality and to understand how visitors use the site through analytics tools. No Protected Health Information is collected through website cookies or analytics.

Most browsers accept cookies automatically; you can change your browser settings to decline or delete cookies. Declining cookies may affect some website functionality but will not affect your ability to contact us or request a free billing audit.

Children’s Privacy

This website is intended for healthcare providers, practice administrators, and business visitors. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations. The “Last Updated” date at the top of this page will change whenever this policy is revised. Material changes will be reflected on this page.

Contact Us

Questions about this Privacy Policy, or requests regarding your personal information, can be directed to:

RCM Xpert
4323 Colden St, Apt 10I, Flushing, NY 11355
740-766-6083
info@rcmxpert.com