Privacy

This page covers the public demo on thecashprice.com. It is short because the demo collects little.

The demo collects no personal health information

The demo takes two inputs: a medical service and a US zip code. There are no accounts. We do not ask for a name, a date of birth, a diagnosis, an insurance ID or a member ID. If you type a condition into the service box, it is mapped to a service from a fixed list and only the mapped service is kept. The free text is not stored.

What a search stores

Each search writes one event with these fields:

the mapped service (for example, 72148 MRI lumbar spine)
the first 3 digits of the zip code
the timestamp
the device class (phone, tablet or desktop)
the referrer and any UTM parameters on the link you arrived by
how long the search took

A phone number is stored only if you ask for a text or a call. It is stored hashed. Staff see the last four digits. The full number is used once, to send the message or make the call, and is not shown to staff.

How long we keep it

Search events and phone numbers are kept for 90 days. After that we keep only aggregates: counts by service, by zip prefix and by day, with nothing that points to a person or a device.

No cookies for tracking, no cookie banner

We set no advertising or tracking cookies, so there is no cookie banner. Page analytics come from Vercel Analytics, which is cookieless and does not identify visitors. Your IP address is used to apply rate limits and is not stored with the search.

Services the demo uses

Google Places: Provider names, ratings, review counts and distances are fetched from Google when you search and are rendered live. We keep only Google's place IDs. Google's handling of that request is covered by the Google Privacy Policy.
Twilio: Sends the text message if you ask for one. Twilio receives the phone number and the message text.
Anthropic: If the service you type is not on our list, the text of the service box alone is sent to an Anthropic model to map it to a service on the list. The zip code does not go with it, and nothing else does.
Vercel: Hosts the site and runs the cookieless analytics.

Text me this result

If you enter a phone number to receive a result by text, we send one message. The consent line next to the field reads: "By entering your number you agree to receive one text about this result. Reply STOP to opt out. Message and data rates may apply."

We call the office and text you

When a provider's availability is not yet confirmed, you can ask us to call the office. You leave a mobile number, we verify it with a code by text, and a person at Rivendell calls the provider. You get one text when the office answers, with the earliest confirmed date. During the SIIA conference these callbacks are worked between 08:00 and 17:00 Mountain time on Oct 11, 12 and 13, 2026. Each number can request up to 5 calls a day.

The form for plans and administrators

The form on the page for plans takes a name, a company, a work email and a file. The file is for de-identified claim lines: CPT code, zip or NPI, allowed amount. Do not upload member names, member IDs, dates of birth or diagnoses. A business associate agreement is signed before any member data reaches Rivendell in a pilot.

Plans that Rivendell administers

Members of a plan that Rivendell administers are covered by the Rivendell privacy policy and the HIPAA Notice of Privacy Practices, not by this page. California residents can read the California disclosures.

Questions

Write to care@rivendell.health, including to have a phone number removed before the 90 days are up.

Who we are

Elrond Health Inc., a Delaware corporation, offers California insurance services under the filed name Rivendell Insurance & Administration Services. California insurance license 6018541.

156 2nd St, Unit 310, San Francisco, CA 94105