Security by separation
The public website is not a client record system
Next Move Care begins with the least information reasonably needed for a callback. Medical records and detailed case histories do not belong in the public form, ordinary email, text messages, social media, or an AI chatbot.
What the public form accepts
An email address, required acknowledgment of the website boundaries, and limited optional name, phone, callback, voicemail, timing, and referral-source preferences. There is no free-text medical-story field and no document-upload field.
What not to send
Do not send diagnoses, medication lists, medical records, insurance documents, Social Security numbers, financial information, race or ethnicity, sexual orientation, gender identity, disability details, religion, immigration or refugee history, passwords, authentication codes, photographs of identification, or a detailed patient story through the website, ordinary email, text message, social media, or ChatGPT.
Active work begins in a separate process
If the service appears appropriate after the fit call, Next Move Care first establishes a written scope, service agreement, privacy expectations, identity or authority verification when needed, and any required authorization. Only then will an approved method be provided for information genuinely needed for the agreed work.
Secure messaging, phone, email, and fax
Secure app-to-app messaging is available through the Next Move Care Spruce link. Call (804) 531-6950 for time-sensitive administrative coordination. Do not send records by SMS or ordinary email. Call before faxing so the secure destination, recipient, and authorization can be verified.
HIPAA and BAA review
Spruce includes a Business Associate Agreement for eligible organizations under its applicable terms. Whether HIPAA or a separate BAA applies to Next Move Care's work depends on the specific parties and services. Professional partners should request review before transmitting PHI.
Account and system separation
The public website, domain administration, business communication, payment processing, and any approved client-record system should use separate accounts and access controls. Access to one service should not automatically provide access to the others.
No false promise
No internet service can be guaranteed risk-free. Next Move Care reduces exposure by collecting less, separating systems, limiting access, and avoiding unnecessary public transmission of sensitive information. This page describes the website's intended safeguards; it is not a guarantee against every security incident.
If you sent sensitive information by mistake
Use the Request Support form and explain only that sensitive information may have been sent through an unapproved channel. Do not repeat the sensitive information in a new message. For an immediate medical or safety emergency, call 911.
Last reviewed
July 28, 2026.