Last Updated: September 24, 2026
This Privacy Policy (“Policy”) explains how ATC Healthcare Services, LLC (“ATC,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with the ATC Healthcare mobile application (the “App”) and the ATC candidate web portal (the “Portal,” and together with the App, the “Services”). The Services are provided to clinicians, allied health professionals, and other individuals whom ATC employs, engages, or is considering for employment or engagement (“you”).
This Policy applies only to personal information collected through the Services and to the handling of that information in the workforce management platform connected to the Services. The Services are not used to collect, store, or transmit patient information. Do not enter patient information into the Services.
Please read this Policy carefully. If you have questions, contact us using the information in the “How to Contact Us” section below.
HOW THE SERVICES WORK
The App and the Portal are front ends to a workforce management platform that ATC licenses from its software vendor, LaborEdge. The App does not maintain a separate database of its own, and no information is held only on the App. Information you enter is transmitted to and stored in the LaborEdge platform database, which ATC accesses, and ATC uses that platform to manage recruiting, credentialing, scheduling, and timekeeping. LaborEdge hosts the platform on cloud infrastructure operated by Amazon Web Services in the United States, and photographs and documents you upload are stored in Amazon S3 within that same environment.
Certain onboarding forms, including the federal Form I-9 and federal and state tax withholding forms, are linked from the Services and completed through them.
PERSONAL INFORMATION WE COLLECT
We collect the categories of personal information described below. “Personal information” means information that is linked or reasonably linkable to an identified or identifiable individual. It does not include de-identified or aggregated information. The specific information collected depends on the compliance and credentialing requirements ATC configures and on the requirements of the facility where you are placed.
| Category | Examples | Source |
| Identifiers and contact information | Name; mailing address; telephone and mobile number; email address; account username and password; emergency contact information you choose to provide. Date of birth, which you may choose to provide on your profile and which is required on the Form I-9 linked from the Services. | You |
| Government identifiers and work authorization | Social Security number, which you may choose to provide on your profile and which is required on the Form I-9 linked from the Services. Identity and employment authorization documentation you present to complete the Form I-9, and the related attestation. | You |
| Tax and payroll information | Information you provide on federal Form W-4 and applicable state withholding forms, which are linked from the Services, including filing status and withholding elections. | You |
| Professional and credentialing information | Professional licenses and certifications, license numbers, issuing authorities, and expiration dates; education, training, skills, and work history; references; credentialing and compliance documents you upload. | You |
| Health and screening information | Immunization and vaccination records; tuberculosis screening results; results of testing for communicable or infectious disease where a facility or jurisdiction requires them; and other health screening documentation required for placement. You submit these through the document upload function. | You; testing or screening providers |
| Assignment and timekeeping information | Facility, unit, shift, and assignment dates; clock-in and clock-out times, breaks, and hours worked; timesheet images you capture. | You; the Services |
| Electronic signatures | Your electronic signature, and the signature of the manager who approves your recorded time, captured when time entries are submitted and approved. | You; approving managers |
| Location information | The latitude and longitude of your device, captured when you clock in or clock out of a shift, used to verify that time was recorded at the assigned facility. | Your device |
| Device and technical information | A device identifier, stored so that we can send you push notifications if you enable them. Your Internet Protocol (IP) address, recorded as part of your login and logout history and used for authentication and security purposes only. Camera and device file and media library access, if you grant it, used to capture and upload credentialing documents and timesheet images. | Automatic; your device |
| Reference information | Responses your references submit, and the IP address from which a reference responds, used solely to detect duplicate or fraudulent responses. | Your references |
| Background check and assessment information | Background check results, including criminal history and employment verification, and assessment or testing results. These results are provided to ATC and are not displayed to you in the Services. | Consumer reporting agencies and assessment vendors ATC engages |
We do not collect genetic information or family medical history through the Services. Please do not submit genetic information or family medical history through the Services. We collect health and screening information solely to establish and document your eligibility for employment, engagement, and placement, and to satisfy the requirements of our clients and applicable law. We do not use it to infer characteristics about you, and we do not sell it. We maintain records of medical examinations and inquiries separately from other personnel records and limit access to them as required by law.
The Services do not contain third-party advertising, advertising identifiers, or third-party analytics or tracking software development kits. We do not use the Services to track you across other apps or websites, we do not engage in cross-context behavioral advertising through the Services, and we do not sell your personal information.
The Services do not use artificial intelligence, algorithmic profiling, or automated decision-making in connection with employment, engagement, placement, or compensation decisions, and they do not query external sources to auto-populate your information.
DEVICE PERMISSIONS
The App asks your permission to use the following. You may grant or withdraw each permission at any time through your device settings, although some features will not function without the relevant permission.
- Notifications, so that we can send you assignment, scheduling, and credentialing alerts.
- Camera, so that you can photograph credentialing documents and timesheets, including at clock-in and clock-out.
- Device files and media, so that you can upload images and documents already stored on your device.
- Location, to record the latitude and longitude of your device when you clock in or clock out of a shift.
BIOMETRIC AUTHENTICATION
If you choose to use a device unlock feature such as Face ID, Touch ID, or a fingerprint or facial unlock, that authentication is performed entirely by your device’s operating system. Neither ATC nor LaborEdge receives, collects, captures, purchases, stores, or otherwise obtains any fingerprint, voiceprint, scan of hand or face geometry, or other biometric identifier or biometric information from the Services. After your device unlocks, you log in separately with your username and password.
LOCATION INFORMATION
When location-based timekeeping is enabled, the App will ask your permission to access your device location and will record the latitude and longitude of your device at the time you clock in or clock out of a shift. The purpose is to verify that time was recorded at the assigned facility. The App does not track your location continuously, does not collect your location in the background, and does not use your location for any purpose other than timekeeping verification. You may decline or withdraw location permission at any time through your device settings; if you do, you may need to record time by another method, and your employer or the facility may have its own requirements for verifying time worked.
HOW WE USE PERSONAL INFORMATION
We collect and use personal information only for the purposes described below or as otherwise disclosed to you at the point of collection:
- To evaluate you for employment or engagement, and to recruit, hire, onboard, and place you.
- To verify your licenses, certifications, and health and screening requirements, and to document your compliance to our clients, accreditors, and regulators.
- To schedule assignments, record hours worked, and administer pay and benefits.
- To communicate with you about assignments, credential expirations, and compliance requirements.
- To operate, maintain, secure, support, and improve the Services and the platform.
- To detect, investigate, and prevent fraud, security incidents, and unlawful activity.
- To comply with legal obligations, respond to legal process, and establish, exercise, or defend legal claims.
We will not process your personal information for a materially different, unrelated purpose without first providing notice and, where required by law, obtaining your consent.
HOW WE SHARE PERSONAL INFORMATION
We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. We disclose it only to the categories of recipients below.
| Category of Recipient | Purpose of Disclosure |
| Software vendor | LaborEdge provides and hosts the platform, the App, and the Portal, and processes personal information on our behalf under contract. LaborEdge is not permitted to use your personal information for its own purposes. |
| Client healthcare facilities | Facilities where you are placed receive the information necessary to accept your placement, which typically includes your name, credentials, and confirmation that you satisfy the facility’s health, screening, and competency requirements. |
| Integration partners ATC enables | The platform supports integrations that are activated based on ATC’s own vendor relationships and workflows rather than being inherent to the platform. Depending on what ATC enables, these may include electronic signature providers such as DocuSign, consumer reporting agencies that perform background checks, assessment and testing vendors, payroll and tax providers, and benefits administrators. |
| Payroll partner | Information necessary to pay you will be provided to the payroll provider supporting that feature. ATC does not currently use this feature. |
| Legal, safety, and government | Courts, regulators, accreditors, and law enforcement or government authorities where disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, safety, or property of any person. |
| Corporate affiliates and successors | Our affiliates, and, in connection with a merger, acquisition, financing, or sale of assets, the relevant counterparty, consistent with this Policy. |
The service providers and processors identified above are contractually limited to processing personal information as necessary to perform services for us and may not use it for their own purposes.
SMS MESSAGING
Consent for SMS Communications:
If you consent to receive SMS communications from us, directly or through our third-party partners, the information obtained as part of the SMS consent process will not be shared with any other third parties for marketing purposes. Consent to receive text messages is not a condition of employment or engagement.
Types of SMS Communications:
If you have consented, you may receive text messages about available shifts and assignments, scheduling and timekeeping, credential expirations and compliance requirements, and onboarding.
Message Frequency:
Our SMS message frequency will vary but will not exceed sixty (60) messages per month.
Potential Fees for SMS Messaging:
Many carriers charge a fee for each message sent or received. This can vary depending on the carrier’s pricing structure and whether the message is sent domestically or internationally.
Opt-In Method:
You may opt in to SMS messaging from us through the Services or through intake forms provided during onboarding.
Opt-Out:
You may opt out of SMS messaging from us by replying STOP at any time to any message received. Once opted out, you will receive no further marketing or notification text messages. You may opt back in at any time by replying START. We will still communicate with you by other means as necessary to your employment or engagement.
Standard Messaging Disclosures:
Message and data rates may apply. Message frequency may vary. You can opt out at any time by texting “STOP.” For assistance, text “HELP.”
YOUR CHOICES
- Device permissions. You may grant or withdraw camera, device file and media, notification, location, and device unlock permissions at any time through your device settings. Some features will not function without the relevant permission.
- You may ask us to correct inaccurate information in your profile, and you should keep your credentialing information current.
- You may opt out of text messages as described above.
GOVERNING LAW
The Services are offered for use only in the United States. By submitting information through the Services, you consent to the storage and use of that information in the United States in accordance with this Policy.
NOTICE TO CALIFORNIA RESIDENTS
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), may apply to personal information we collect about you as an employee, applicant, or independent contractor. This section serves as our notice at collection.
The categories of personal information we collect, the purposes for which we use them, and the categories of recipients to whom we disclose them are described above. Those categories include identifiers; personal information described in the California customer records provision; characteristics of protected classifications; internet or other electronic network activity information; professional or employment-related information; education information; and sensitive personal information, which for the Services includes your Social Security number, health information, account log-in credentials, and, once location-based timekeeping is enabled, precise geolocation. We collect and use sensitive personal information only for the purposes described in this Policy and do not use it to infer characteristics about you.
Your Rights under the CCPA:
- Right to know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it;
- Right to delete personal information we collected from you, subject to exceptions, including our obligation to retain employment, tax, licensing, and healthcare records;
- Right to correct inaccurate personal information;
- Right to limit the use and disclosure of sensitive personal information, where that right applies; and
- Right to non-discrimination and non-retaliation for exercising your rights.
Sale and Sharing:
We do not sell personal information and do not share it for cross-context behavioral advertising.
NOTICE TO WASHINGTON RESIDENTS
Washington’s My Health My Data Act may apply to certain health-related information. We collect the health and screening information described above only to establish your eligibility for employment, engagement, and placement. We do not sell it, and we will not collect, use, or share it for any other purpose without your separate authorization. Washington residents may ask us to confirm whether we hold such information, to identify the third parties with whom it has been shared, and to delete it, subject to our legal recordkeeping obligations.
NOTICE TO ILLINOIS RESIDENTS
The Services do not collect, capture, purchase, receive through trade, or otherwise obtain or store any biometric identifier or biometric information as those terms are used in the Illinois Biometric Information Privacy Act. Device unlock features such as Face ID, Touch ID, and fingerprint or facial unlock are performed by your device and are not transmitted to, or retained by, ATC or LaborEdge.
NOTICE REGARDING AUTOMATED DECISION-MAKING
The Services do not use artificial intelligence, algorithmic profiling, or automated decision-making in furtherance of decisions that produce legal or similarly significant effects about you, including decisions about employment, engagement, placement, or compensation. If that changes, we will update this Policy and provide any disclosure or opportunity to opt out that applicable law requires before the change takes effect.
NOTICE TO RESIDENTS OF OTHER U.S. STATES
The states of Arkansas, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have adopted comprehensive consumer data protection acts that generally define a “consumer” as a resident of the state acting only in an individual or household context, and not in a commercial or employment context. Because the Services are provided to you in connection with your employment, engagement, or application for employment with ATC, those statutes generally do not apply to the personal information described in this Policy. Where a state law does grant you rights in this information, we will honor the rights and timelines that law requires.
HOW TO EXERCISE YOUR RIGHTS
To exercise any right described above, submit a request using the methods in “How to Contact Us.” Your request must provide enough information for us to reasonably verify that you are the person about whom we collected personal information, or an authorized representative, and must describe your request with enough detail for us to understand and respond to it.
Verification:
To protect your privacy and maintain security, we will take steps to verify your identity before granting access to, correcting, or deleting personal information, and we may require you to provide information for that purpose. You may use an authorized agent where permitted by law; we may deny a request if the agent does not submit proof of valid authorization.
Our Response Time:
We will respond to a verifiable request without undue delay and within 45 days of receipt. The response period may be extended once by an additional 45 days where reasonably necessary; we will inform you of any extension, and the reason for it, within the initial 45-day period.
Appeals:
If we decline to act on your request, you may appeal by contacting us at the address in “How to Contact Us” with the subject line “Privacy Request Appeal.” We will respond to your appeal in writing within 45 days (or 60 days where reasonably necessary, with notice to you) and will explain the reasons for our decision. If your appeal is denied, you may contact the consumer protection authority in your state.
DATA RETENTION
We retain personal information for as long as you are employed or engaged by ATC and afterward for the periods required by applicable employment, tax, licensing, and healthcare recordkeeping laws, and as necessary to establish, exercise, or defend legal claims. In determining the appropriate retention period for each category, we consider the length of our relationship with you, our legal and regulatory obligations, our legal position, including applicable limitation periods, and the sensitivity of the information. Where you apply but are not engaged, we retain your information for two (2) years. When a retention period ends, we delete or de-identify the information in accordance with our routine recordkeeping.
DATA STORAGE AND SECURITY
Your personal information is stored and processed on systems located in the United States. LaborEdge personnel, including support, maintenance, and development staff, may access the platform from outside the United States, and you may do so yourself if you travel. All access requires credentials and authentication. Countries from which the platform is accessed may have data protection laws that differ from those of the United States, and government authorities in those countries may in some circumstances be able to obtain access to information under their own laws.
We and LaborEdge maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure, including access controls limited to personnel who require access, credential-based authentication, AES-256 encryption of information at rest, and TLS 1.2 or higher for information in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
CHILDREN’S PRIVACY
The Services are intended for adults. They are not directed to, and may not be used by, anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through the Services, please contact us so that we can address it.
CHANGES TO THIS POLICY
We may update this Policy from time to time. When we make changes, we will revise the “Last Updated” date above. If we make a material change to what we collect or to how we use or disclose it, we will provide additional notice as required by law, update the disclosures in the Services and in the applicable app store listing, and do so before the change takes effect.
HOW TO CONTACT US
If you have questions or concerns about this Policy or our privacy practices, contact us:
- By email: info@atchealthcare.com
- By phone: 516-750-1600
- By mail: ATC Healthcare Services, LLC, Attention: Privacy Policy Inquiries, 1 Hollow Lane, Suite 201, Lake Success, New York 11042