Sila is a directory, not a therapy platform. We don't sit between you and your provider, and we don't record or store anything that happens after you leave our site.
What we collect
From directory visitors: We do not require an account to browse the directory. We don't collect your name, email, or any personal information when you search for or view provider profiles.
Our hosting provider (Vercel) retains standard server logs — IP address, browser type, and the URL you requested — for up to 30 days. This is standard infrastructure logging, not user tracking.
From providers applying to be listed: When you submit an application, we collect:
- Full name and professional credentials
- License number and issuing state (used solely for verification)
- NPI number (used solely for NPPES verification)
- Email address (to communicate about your application and listing)
- Practice details: modality, specialties, languages, fees, scheduling link
- Photo (if you choose to upload one)
- A short bio and professional statement
How we use it
We use the information you provide to:
- Verify your credentials against NPPES, the OIG exclusion list, SAM.gov, and your state licensing board
- Build and display your public profile in the directory
- Communicate with you about your application, listing status, and any changes we make
- Pause or remove your listing if a credential check returns a concern
We do not use your information for advertising. We do not build marketing profiles. We do not sell or rent your data to anyone.
Provider listings
By applying to be listed on Sila, you consent to your name, professional credentials, practice city and state, bio, photo, specialties, fees, and scheduling link appearing publicly on silacare.health.
The following information is never shown publicly: your NPI number, license number, date of birth, or personal email address. These are collected for verification only and stored securely.
You can request that your listing be paused or permanently removed at any time by emailing hello@silacare.health. We will process removal requests within 5 business days.
Third parties and infrastructure
Sila uses the following third-party services to operate:
- Supabase — database and authentication. Provider data is stored in Supabase's US-based infrastructure. Supabase is SOC 2 Type II compliant.
- Vercel — website hosting and delivery. Vercel stores standard access logs for 30 days.
- PostHog — anonymous usage analytics, running in cookieless mode. PostHog tracks page views and interactions (such as which filters are used in the directory) without setting cookies or collecting personally identifiable information. No user ID is created, no cross-session tracking occurs, and no data is sold or shared for advertising.
We do not use Google Analytics, Facebook Pixel, or advertising tracking scripts. We do not sell or share usage data with third parties.
Booking privacy
When you click a provider's "Book a session" link, you leave silacare.health and are taken to the provider's own scheduling platform (typically Calendly, SimplePractice, or a similar tool).
Sila has no visibility into what happens there. We do not receive, store, or process any information you share with a provider through their booking system. That relationship is between you and the provider, governed by the provider's own privacy policy and their obligations as a licensed clinician.
HIPAA note
Sila is a directory service. We are not a healthcare provider, a covered entity, or a business associate under HIPAA. We do not create, receive, maintain, or transmit protected health information (PHI).
If you are a client seeking care, your clinical relationship — and the privacy protections that come with it — begins when you make contact with a provider directly, not on this site.
Data retention
Provider listing data is retained for as long as your listing is active. If you request removal, we will delete your profile data from our database within 30 days. Verification records (confirming that a license check was completed) may be retained for up to one year in anonymized form for audit purposes.
Server access logs are deleted after 30 days.
Your rights
If you are a provider listed on Sila, you have the right to:
- Review the information we hold about you
- Correct any inaccuracies in your profile
- Request that your listing be paused or permanently removed
- Request a copy of the data we hold
To exercise any of these rights, email hello@silacare.health. We will respond within 10 business days.
Contact
Questions about this policy or how we handle data? We'd like to hear from you.