Privacy
Last updated October 28, 2026
Gist Billing provides revenue cycle services to behavioral health practices. This page explains what information this website handles and how we protect the health information our client practices entrust to us.
This website
The public pages of gistbilling.org do not use advertising, analytics or tracking cookies, and they do not ask for any personal information. The interactive workspace tour runs entirely in your browser with invented sample records and does not send anything to us.
The one exception is the landing page we use for Google Ads (and its "request received" page). Those pages, and only those, load Google's measurement tag (Google Ads and Google Analytics) so we can tell whether an ad led to a request. Google may set cookies there under its own policies. Those pages are not linked from the rest of this site. The request form on that page sends your name, practice, email, optional phone number and message to us by email; we use it only to reply to you, and it is not stored on this website.
If you email us, we receive your name, email address and whatever you include in the message. We use it only to reply to you and to discuss our services. Please do not include patient information in email.
Client practices and protected health information
Before any patient information is shared with us, the client practice and Gist Billing sign a Business Associate Agreement under HIPAA. We use protected health information only to perform the billing services the practice has engaged us for, as that agreement and HIPAA allow.
- We do not sell patient information or use it for marketing.
- Each practice can see only its own records.
- Our client platform is hosted on Amazon Web Services in the United States under a Business Associate Agreement with AWS. Data is encrypted in transit and at rest.
- Access to the client workspace is by invitation only and requires multi-factor sign-in. Sign-ins and record changes are logged.
- Information is shared with health plans, clearinghouses and other parties only as needed to submit and follow up on claims, or as required by law.
Questions about a patient's own records should go to the treating practice, which remains responsible for patient requests under HIPAA. We will assist the practice as our agreement requires.
Signing in
When a client user signs in, we process their name, email address and sign-in activity to provide secure access. Sessions end automatically after a period of inactivity.
Changes
If this page changes, we will update the date above.
Contact
Questions about privacy can be sent to kgist@gistbilling.org or by calling (567) 868-9940.
Gist Behavioral Billing LLC
Ohio