Lestonnac Clinic Insights — Privacy Policy

Publisher: Lestonnac Free Clinic · Effective October 24, 2026

Who this extension is for

Lestonnac Clinic Insights is an internal Chrome extension made by Lestonnac Free Clinic for its own staff and volunteers. It is not offered to the public or to other organizations. It works only inside the clinic's electronic health record (iCare, at pm.icare.com) and the clinic's dental system (Aspro Dental, at asprodental.com), and only for a person who is already signed in to those systems with their own clinic account.

What information it handles

To show schedules, check-in lists, reminders and reports, the extension reads information from iCare and Aspro using the signed-in staff member's own access. This can include patient names, medical record numbers, dates of birth, phone numbers, appointments, and clinical information such as problem lists, lab results, vitals, allergies and medications. The extension never gives anyone access to information their own iCare or Aspro account cannot already see.

Where information goes

  • Requests are made so that Chrome does not keep copies of patient information in its cache.

  • Information is sent only to iCare and Aspro — the same systems it came from — for example when a staff member books an appointment or checks a patient in.

  • The extension does not send any information to Lestonnac Free Clinic servers, to the extension's developer, to Google, or to any other third party. It contains no analytics, advertising or tracking code.

  • Information is never sold, rented, or used for advertising, credit decisions, or any purpose unrelated to the clinic's own patient care and operations.

What is kept on the computer

  • Most patient information is held only in the browser tab's memory while it is being used, and is gone when the tab or Chrome is closed.

  • Care reminders for today's patients are kept in Chrome's temporary session storage, which Chrome clears when it closes.

  • Optional saved quality data: if a staff member turns this on, quality-measure results are saved encrypted (AES-256) with a key made from an 8-digit PIN that is never stored. Five wrong PINs or 90 days without use erase it, and it can be erased at any time in Settings.

  • Activity log: a record of actions taken through the extension on that computer (for example a chart viewed, a record changed, or a patient list downloaded), with the staff member's iCare username, the time and the medical record number — no names or clinical details. It is kept for up to six years for compliance review and can be viewed only by clinic administrators.

  • Settings and non-patient information — preferences, provider specialties, a log of schedule changes (provider, site, dates), and counts without names — are kept in the extension's private storage on that computer.

Security

The extension uses the staff member's existing iCare and Aspro sign-in and the access controls of those systems. It does not collect, store or transmit passwords. Activity in iCare and Aspro remains subject to those systems' own audit logs and the clinic's HIPAA policies.

Removing the extension

Removing the extension from Chrome deletes everything it stored on that computer.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date.

Contact

Lestonnac Free Clinic · speters@lestonnacfreeclinic.org