Privacy Policy | FindMyNPI

The short version

Provider records come from the public CMS NPPES dataset. We set no first-party cookies and there is no account or login, so there is nothing to sign up for. We never ask you for personal information, our own analytics is cookieless, and the limited server logs we keep for security are never sold or shared. When display advertising is running, the ad network may set its own cookies; you can opt out through the standard industry controls.

This privacy policy describes the personal data that FindMyNPI processes about visitors to the site, how we use it, and the choices visitors have. It does not cover the personal data of healthcare providers, which is reproduced from the federal NPPES public dataset and addressed separately in the opt-out page.

What we collect from visitors

Standard server access logs are written for every request and contain the requesting IP address, the URL requested, the HTTP method, the response status, the user-agent string, and a timestamp. These logs are retained for ninety days and used solely for capacity planning, abuse mitigation, and operational debugging. They are never sold, shared with marketers, or correlated with any other identifier.

The site is served from Cloudflare's global edge network. Cloudflare observes the request in transit and may retain its own short-lived logs subject to its privacy policy. We use Cloudflare Web Analytics (a privacy-respecting, cookieless product) and a server-side analytics measurement sent from our edge worker. Neither sets cookies in your browser, and neither builds a cross-site profile of you. We do not place first-party analytics cookies.

Cookies

FindMyNPI does not set first-party cookies. Our advertising partner (when display advertising is active) may set cookies for ad personalisation and frequency capping. You can opt out of personalised advertising via the standard industry mechanisms at optout.aboutads.info and youronlinechoices.eu, and through your browser's tracker-protection settings.

Advertising

Display advertising is provided by Google AdSense or a comparable network. Advertisers may use cookies and similar technologies to serve ads based on prior visits to this and other websites. We do not share any visitor data with advertisers beyond what they collect directly through the ad units they serve. We do not place retargeting pixels for our own purposes.

Provider data

Provider names, NPIs, addresses, telephone numbers, and other professional details shown on the site are sourced from the public-domain NPPES dataset and are not personal data of site visitors. Providers wishing to be removed from the directory can use the opt-out process.

Data we never collect

We do not ask for or collect names, email addresses, phone numbers, payment information, health information, or any other personal data from visitors. The site contains no contact forms, no account system, no checkout, and no chat. There is nothing to register for.

Children

The site is not directed at children under the age of thirteen and we do not knowingly collect data from anyone in that age group.

International visitors

The site is intended for a United States audience and served from a global edge network. Visitors from outside the United States are subject to the privacy regimes of their own jurisdictions; the limited data we process is unlikely to qualify as regulated personal data under most international frameworks but visitors with concerns should not visit the site.

Contact

Privacy questions and data-subject requests: privacy@findmynpi.com. Provider record removal requests follow the opt-out process. General inquiries: hello@findmynpi.com.

Changes

We will note material changes to this policy at the top of the page. The current effective date is shown below.

Effective date: 2026-05-08.