Privacy & data handling

Each quarterly submission captures four categories of data:

• Organization context — provider type(s), counties served, size band. Organization name is requested for de-duplication only and is never published.
• Operational indicators — DSP vacancy, turnover, wages, waitlist, declined referrals, reduced hours, crisis events, financial position.
• Narrative — optional free-text describing the quarter's experience. Used to inform analysis; quoted only with explicit permission.
• Optional contact info — name and email, only if you opt in to follow-up. Never published or shared.

A one-way hash of your IP address is stored alongside each submission to deter duplicate or automated submissions. The hash cannot be reversed to recover your IP.

Only authenticated coalition data reviewers can view individual submissions. Reviewers operate under a written confidentiality agreement and access is logged.

The state of Idaho, the Department of Health and Welfare, the Legislature, your MCO, and the public cannot access raw responses. Only aggregated, suppressed indicators are ever published.

No published figure is computed from fewer than five included providers. No category or regional breakdown is computed from fewer than three providers in that cell. Cells below threshold roll up to broader groupings or are withheld from that quarter's release entirely.

This rule is enforced server-side in the aggregation pipeline, not by reviewer discretion. The methodology page documents the exact computation.

The public dashboard publishes only aggregate medians, percentages, and counts that have cleared the suppression threshold. Provider names, organizational identifiers, contact info, narrative text, and any single-respondent values are never published.

Aggregate figures may be cited by journalists, researchers, legislators, and advocacy groups. The dataset is offered under the principle that public-money services should have public operational accountability.

Raw submissions are retained for the duration of the longitudinal study (five years rolling) so that quarter-over-quarter trends remain computable. After five years, raw submissions are aggregated to immutable summary rows and the underlying detail is deleted.

Aggregate published figures are kept indefinitely as part of the public record.

• Withdraw a submission — send us a message (choose "Privacy or data-handling") with the approximate submission date and organization name. Withdrawal removes the row and recomputes aggregates within 48 hours.
• Request a copy of what we have on file for your organization.
• Correct a submission you believe contains an error.
• Opt out of contact at any time, even if you previously consented.

The application runs on managed cloud infrastructure with encryption at rest and in transit. Database access is gated by row-level security policies — the public website cannot read individual submissions even with valid credentials. Reviewer access requires a separate authenticated account.

If you believe data has been improperly accessed, email security@hcbsimpact.org. We will respond within two business days.

• We do not sell, license, or share raw data with any third party.
• We do not use analytics or advertising trackers on this site.
• We do not require an account to submit.
• We do not accept funding from the state of Idaho, MCOs, or any vendor whose business is affected by published findings.

Material changes will be announced at least 30 days before they take effect. The "last updated" date above reflects the most recent revision.