Practice-controlled workflow

Healthcare No-PHI mode

For participating healthcare practices, TollCover is designed to operate in a no-patient-data mode: the practice communicates with the patient and applies the credit in its own systems, while TollCover receives campaign-level aggregate results only.

Healthcare No-PHI pricing, if offered later, would be a fixed subscription, fixed annual fee, or fixed per-location fee. It would not be a per-patient fee, referral fee, success fee, or a percentage of treatment revenue or applied credit.

This is not a patient claim page. Patients do not visit TollCover in this mode. The practice keeps every association inside its own systems.

This file contains only TollCover packet identifiers and approved copy. If your practice adds patient information locally, do not upload the completed file to TollCover. Keep the patient-to-packet association only inside your authorized practice systems.

Submit campaign totals only. Do not enter patient names, contact details, appointment dates, procedures, payer information, invoices, plate numbers, routes, or other patient-level information.

No-PHI Addendum

Version R1.1-2026-08-19. Content hash da09f430fa187f8b7cbd6ee33eaf655bebe2a47f1b643de3f4109d0919392298.

TollCover Healthcare No-PHI Addendum R1.1-2026-08-19

This Addendum applies when a healthcare merchant selects HEALTHCARE_NO_PHI.

The parties intend to operate TollCover without transmitting patient-level information to TollCover. The practice remains responsible for its own patient communications, eligibility policy, billing treatment, healthcare-program restrictions, advertising, and legal obligations.

The practice agrees that it will: determine eligibility inside its own authorized systems; communicate with patients through its own reminder, portal, SMS, email, or staff workflow; keep the association between a patient and a TollCover packet code only inside its own systems; apply any fixed credit in its own billing system; provide TollCover only campaign-level aggregate totals; not send or upload patient names, contact details, addresses, appointment dates, patient IDs, diagnoses, procedures, treatment plans, payer information, insurance information, copay/deductible information, invoices, balances, payment data, plate numbers, toll accounts, routes, receipts, or patient free text; not upload a locally completed packet file containing patient information; use a fixed credit and bounded packet count; independently determine whether a credit is permitted for a particular patient or service; and not represent TollCover as a toll operator, healthcare provider, legal advisor, referral service, or payer.

TollCover will: provide campaign configuration, bounded packet batches, approved copy, and aggregate reporting; not request or provide fields for patient-level information in this mode; not provide a patient-facing claim page; not collect license plates or toll-account information; not send healthcare patient reminders; not receive, hold, transmit, or reimburse money; not determine clinical, billing, payer, federal-program, copay, deductible, or legal eligibility; not use healthcare campaign data for patient profiling, advertising, or a provider directory; and apply documented security, access, audit, retention, export, and deletion controls to the data it does hold.

Healthcare No-PHI pricing must be a fixed subscription, fixed annual fee, or fixed per-location fee. It must not be based on patient count, referral, new patient, treatment acceptance, treatment revenue, applied credit, claim amount, or successful case.

The practice may include a yes/no promotional question in its own reminder. The practice must not request a plate number or other prohibited data for TollCover. Any locally collected answer remains in the practice system and is reported only in aggregate.

This Addendum documents the intended product and data boundary. It is not a representation that the arrangement is exempt from HIPAA, California CMIA, healthcare fraud-and-abuse rules, advertising rules, referral restrictions, or other law. The standardized architecture and documents require counsel review before a real healthcare pilot.

TollCover may suspend the healthcare mode if it receives prohibited patient-level information, detects an attempted upload, or determines that the mode boundary cannot be maintained.