PracticeKey is a marketplace where physicians and practice owners explore practice transitions — buying a practice, buying into one, or joining one. This policy explains what we collect, why, who we share it with, and what control you have.
We do not sell your information. We do not use advertising networks. We do not track your behavior on this site or anywhere else.
1. Who we are
PracticeKey is operated by Legacy Medical Solutions LLC, a Florida limited liability company. When this policy says “we,” “us,” or “PracticeKey,” it means Legacy Medical Solutions LLC.
For privacy questions or requests: privacy@practicekey.io
2. What we collect
We collect only information you give us. We do not buy data about you, and we do not collect information about you from other sites.
When you create an account
- Name and email address
- Password (stored as an encrypted hash — we never see or store your actual password)
- Whether you are a practice owner or a physician seeking opportunities
- National Provider Identifier (NPI), if you choose to provide one
When you list a practice
- Practice name, street address, city, state, and ZIP code
- Specialty and deal type
- Financial information: asking price, annual revenue, EBITDA, patient volume, and compensation range where applicable
- Years established, physician count, and staffing counts
- NPI number, which we verify against the public CMS National Provider Identifier registry
- Practice profile details: care philosophy, schedule structure, patient mix, EMR system, and practice tags
- A free-text description you write
We derive approximate map coordinates from the practice address. See Section 5 for how location is handled.
When you build a physician profile
- Specialty, years of experience, and career stage
- Career goals and practice style, in your own words
- Preferred deal types, location preferences, and timeline
- Budget range, if you provide one
When you request access to a listing (pre-screening)
- Your reason for interest, in your own words
- Career stage
- Financing situation
When you submit an application for a specific opportunity
Depending on the deal type, this may include:
- Full name, email, and a cover message
- Years in practice, current employment, and board certification status
- Investment capacity, buy-in capacity, or compensation expectations
- Availability, target timeline, and clinical strengths
- Malpractice history, including a free-text field where you may describe circumstances
Please read Section 4 before completing an application.
When you use the Succession Planner
- Timeline, flexibility, deal type, specialty, years in practice, state
- Your goals and your stated biggest concern
Your Succession Planner answers are also stored in your own browser so you can return to an in-progress plan. You can clear this at any time by clearing your browser’s site data for practicekey.io.
When you join the financing waitlist
- Your email address only.
3. What we do NOT collect
We want to be specific, because many sites are not:
- No behavioral tracking. We do not record page views, clicks, scrolling, session replays, or how long you spend anywhere on the site.
- No third-party analytics. No Google Analytics, no Meta pixel, no advertising or marketing trackers of any kind.
- No advertising. We do not serve ads and we do not share your information with advertisers.
- No data sales. We do not sell, rent, or trade your information.
- No cross-site tracking cookies. The only cookies we set are the ones that keep you signed in.
Our internal “Analytics” is aggregate counting of our own records — how many listings exist, how many signups occurred — not observation of individual users.
4. How your information is shared
Practice confidentiality
Practice identity is protected by default. Until a practice owner approves your pre-screening request, other users see only:
- Specialty, city, and state
- Deal type
- An approximate map location
They do not see the practice name, address, asking price, revenue, patient volume, or description.
Physician information shared with practice owners
When you submit a pre-screening request, the practice owner and PracticeKey receive your name, career stage, financing situation, and your stated reason for interest.
When you submit an application, the practice owner can read everything you submitted in that application, including any malpractice history and the free-text details you provide. Share only what you are willing for that practice owner to read. If you would prefer to discuss malpractice history in a conversation rather than in writing, you may say so in the field instead of providing detail.
Service providers
We share information with companies that operate parts of our service. They process it on our instructions and are not permitted to use it for their own purposes.
| Provider | What they receive | Purpose |
|---|---|---|
| Supabase (AWS, United States) | All account and listing data | Database and authentication |
| Resend | Recipient email address and message content, which includes names and application details | Sending transactional email |
| Mapbox | Practice addresses (server-side, at listing creation); your IP address and map viewport when you view a map | Geocoding and map display |
| CMS National Provider Identifier Registry | An NPI number | Verifying provider identity. This is a public U.S. government database. |
| Vercel (United States) | Website traffic, including request contents | Hosting |
Legal disclosure
We may disclose information if required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfer
If Legacy Medical Solutions LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.
5. Location information
Practice addresses are used to place listings on a map. To protect confidentiality, we deliberately publish an approximate location, not the real one. Map pins shown to users who have not been approved are offset from the true address by roughly a mile. Exact coordinates are shown only to the practice owner, to PracticeKey administrators, and to physicians the owner has approved.
We do not collect your device location.
6. Cookies and browser storage
We use only what is necessary to operate the service:
- Session cookies and tokens that keep you signed in.
- Local browser storage holding your Succession Planner answers, so you can resume an in-progress plan.
We do not use advertising, analytics, or cross-site tracking cookies. Because we do not track you, there is nothing to opt out of.
7. How long we keep information
We keep your information for as long as your account exists, and afterward as needed to meet legal, accounting, or dispute-resolution obligations.
Some things to be aware of:
- Deactivating a listing does not delete it. A deactivated listing is removed from search results but its information is retained.
- Applications and pre-screening requests you submitted are retained by the practice owner even if the listing is later deactivated.
- We do not currently delete information automatically after a fixed period.
8. Your choices and rights
You can access and correct most of your information by signing in and editing your profile or listing.
You can request deletion of your account and your information by emailing privacy@practicekey.io.
We want to be straightforward about this: PracticeKey does not yet have a self-service account deletion feature. Deletion requests are currently handled manually by our team. We will confirm receipt of your request and complete it within 30 days. We are building a self-service path and will update this policy when it exists.
Depending on where you live, you may have additional rights — to access, correct, delete, or receive a copy of your information, or to object to certain processing. Residents of California, and residents of states with comparable privacy laws, have these rights. We honor them regardless of where you live. We will not discriminate against you for exercising them.
To make any request, email privacy@practicekey.io.
9. Security
We protect your information with encryption in transit, encrypted password storage, database-level access controls, and access restrictions that keep practice identity hidden until an owner approves a request.
No system is perfectly secure. We cannot guarantee that unauthorized access will never occur. If a breach affects your information, we will notify you as required by applicable law.
10. Children
PracticeKey is a professional marketplace for licensed physicians and practice owners. It is not directed to anyone under 18, and we do not knowingly collect information from children. If we learn we have, we will delete it.
11. Where your information is processed
Our service providers operate in the United States. If you access PracticeKey from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
12. Changes to this policy
We may update this policy. If we make a material change, we will update the date at the top and notify account holders by email before it takes effect.
13. Contact
Privacy questions and requests: privacy@practicekey.io
Legacy Medical Solutions LLC
2945 SW Feroe Ave
Palm City, Florida 34990