Privacy policy

How NPIMap handles information about the people who visit it, and where the provider information on its pages comes from.

Effective November 2, 2026

In short

Information we collect

Server logs

Like most websites, our servers record each request they receive: your IP address, the date and time, the page you asked for (including anything you typed into the search box, which is part of the page address), the page that linked you here, and your browser and operating system as your browser reports them. We use these logs to keep the site secure and available, for example to block automated scraping and abusive traffic, and to diagnose errors. Logs are deleted after 14 days. We do not combine them with other information to identify you.

Email

If you email us, we receive your email address and whatever you include in your message. We use it only to reply to you and keep the correspondence as long as needed for that purpose. We never publish it or sell it.

Cookies

NPIMap itself does not set cookies. The advertising and analytics services described below may set their own cookies or use similar technologies such as web beacons and local storage.

Advertising: Google AdSense

NPIMap is free to use and is supported by ads served by Google AdSense. When a page with ads loads, your browser contacts Google directly, which sends Google information such as your IP address, browser details and the page you are viewing.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent before personalized ads are shown, where the law requires it. Google explains how it uses information from sites that show its ads in How Google uses information from sites or apps that use our services, and how it uses cookies in advertising at policies.google.com/technologies/ads.

Analytics: Google Analytics

We may use Google Analytics to understand how visitors use NPIMap, such as which pages are visited and how people arrive at them, so that we can improve the site. Google Analytics uses cookies and collects information such as your device and browser, approximate location derived from your IP address, and the pages you view. We use this information only in aggregate and do not use it to identify you.

You can prevent Google Analytics from collecting data about your visits by installing the Google Analytics opt-out browser add-on.

Your choices

Most browsers let you block or delete cookies, including third-party cookies, in their settings. Blocking cookies does not stop you from using NPIMap. Deleting cookies does not keep you opted out of personalized advertising, because an opt-out is usually stored in a cookie itself; you may need to opt out again after clearing them.

Web browsers offer a “Do Not Track” setting. There is no common standard for how websites should respond to it, so NPIMap does not change its behavior when it receives the signal; the advertising opt-outs above are the way to limit ad personalization.

Sharing and selling

We do not sell personal information about our visitors. Information is shared only with the service providers that run parts of the site for us (our hosting provider, and Google for advertising and analytics as described above), when the law requires it, or to protect the security of the site and its users.

Some U.S. state laws treat the use of advertising cookies for personalized ads as “sharing” or “targeted advertising”. If you live in a state with such a law, you can opt out using the Google and industry opt-outs above, or by turning on a Global Privacy Control signal in your browser where your state recognizes it. You may also contact us to ask what information we hold about you or to ask us to delete it; because we do not keep accounts or profiles, this is normally limited to server logs and any email you have sent us.

Information about health care providers

The provider pages on NPIMap show information that U.S. government agencies publish about health care providers and facilities: the NPI Registry (NPPES), Medicare enrollment and Care Compare data, and other public files listed on the data sources page. This is business information about providers in their professional capacity, which the government makes public by law. NPIMap does not collect it from visitors and does not add private information to it.

NPIMap holds no patient records and no information about anyone’s health or medical care. Providers who find an error should correct it at the source, as explained on the About page; corrections appear here after the next data refresh.

Security, children and links

The site is served only over encrypted HTTPS connections, and access to our servers and logs is restricted. No method of transmission or storage is completely secure, but we take reasonable steps to protect the little information we hold.

NPIMap is a reference site for adults and is not directed at children under 13. We do not knowingly collect personal information from children.

Pages link to other websites, including government sources. Their privacy practices are their own, and this policy does not cover them.

Changes and contact

We may update this policy when the site or the services it uses change. The date at the top shows when the current version took effect.

Questions about this policy or your information: email .