Security by separation
The public website is not a client record system
Next Move Care begins with limited contact, location, and fit information. Medical records and detailed case histories do not belong in the public form, ordinary email, SMS, social media, or an AI chatbot.
What the public fit request accepts
Required fields are an email address; the submitting person's relationship to the prospective client; state or jurisdiction; city or town; requested setting; broad service-interest category; general timing; confirmation that the prospective client is age 18 or older; permission for Next Move Care to respond; and acknowledgments about emergencies and website boundaries. Optional fields are a contact name, phone number, callback window, call permission, voicemail permission, and referral source. A phone number becomes required only when a callback or voicemail is requested.
The location fields ask for no street address. The form has no free-text medical-story field and no document-upload field.
What not to send publicly
Do not send diagnoses, medication lists, medical records, symptoms, supplement lists, provider names, insurance or claim information, Social Security numbers, financial information, a street address, photographs of identification, passwords, authentication codes, or a detailed client story through the website, ordinary email, SMS, social media, or ChatGPT.
Accepted-client intake is a separate process
After fit, location, authority, insurance, conflict, and capacity screening, Next Move Care may accept a prospective client into its private intake process. Next Move Care may then send a fillable intake packet through secure app-to-app Spruce messaging. Completed packets and requested attachments must be returned only through the Spruce app, not through the public website, Formspree, ordinary email, SMS, fax, or social media.
The packet gathers information only. It is not a native electronic signature, service agreement, authorization, acceptance of service, or promise of coverage or scheduling. Any service agreement or authorization is reviewed and signed separately before work begins.
Secure messaging, phone, email, and fax
Secure app-to-app messaging is available through the Next Move Care Spruce link. Call (804) 531-6950 for administrative coordination. Standard telephone calls, SMS, ordinary email, and fax are not the same as secure app-to-app messaging. Confirm the approved channel, recipient, authorization, and scope before transmitting private health information.
HIPAA and BAA review
Whether HIPAA applies to a particular engagement depends on the parties and services. A Spruce BAA, when applicable, does not cover the public website, Formspree, ordinary email, SMS, or every other vendor and does not determine Next Move Care's legal role in every engagement. Professional partners should request review before transmitting private health information.
Account and system separation
Next Move Care's operating policy requires the public website, domain administration, business communication, payment processing, and any approved client-record system to use separate accounts and access controls. A system is not approved for client information until those safeguards are confirmed.
No false promise
No internet service can be guaranteed risk-free. Next Move Care reduces website exposure by collecting less and separating public requests from accepted-client information. Account separation, access limitation, and other operational safeguards must be confirmed before a system is approved for client information. This is not a guarantee against every security incident.
If you sent sensitive information by mistake
Call (804) 531-6950 or use the public fit request to provide contact details only. During the response, say that sensitive information may have been sent through an unapproved channel, but do not repeat the information. For an immediate medical or safety emergency, call 911.
Last reviewed
August 12, 2026.