No. MedSpace360 never touches patient data. Your website doesn't collect patient health information, we don't build intake forms or portals in v1, and appointment buttons link to the booking system you already use. Contact forms on your site carry a clear notice asking visitors not to include personal health details. This keeps your site, and us, outside the flow of protected health information.

Two places: the federal NPPES registry (the public directory CMS maintains for every provider with an NPI) and you. We pull your public registry record to save you typing, then you review, correct, and confirm every field before anything is built. Nothing goes live without your explicit approval.

You do. The domain is registered in your name; you are the titleholder, not us. The content of your site is yours too. DEOCAs retains ownership of the underlying templates, code, and systems. If you cancel, you keep the domain and receive a static export of your content.

The honest answer: HIPAA applies to protected health information, and our service is designed so that neither we nor your website handle PHI at all. No patient forms, no portals, no chat, no ad trackers. That design keeps us out of Business Associate territory. If you ever need patient intake or secure messaging, we'll point you to a HIPAA-compliant vendor that signs a BAA with you; we don't improvise in that area.

Yes: no contracts, no cancellation calls. You cancel from the Stripe billing portal. Your site stays live through the end of the billing period, we deliver a static export of your content within 30 days, and your domain stays with you because it was always registered in your name.

Yes, with a caveat we're upfront about: 48 business hours from payment to a live site pending your approval. Our team assembles every site by hand from your confirmed data (that's how we keep quality high), and nothing publishes until you approve it. If you're slow to approve, the clock politely waits for you.

Three things: your 10-digit NPI, about two minutes to answer five questions (services, languages, whether you're accepting new patients, your booking link if you have one, and a tagline you can edit), and, optionally, a photo and logo. That's genuinely it. We handle the rest.

Common, and not a problem. Every field we pull from the registry is editable in the wizard; you correct anything stale before confirming. We show the registry's last-updated date so you know what you're looking at. (We'd also gently suggest updating your NPPES record; it feeds hundreds of directories.)

We draft it from your confirmed information, in plain professional language: no 'world-class care' filler, no clinical claims you didn't make. You review and approve every word before the site goes live. Content that overpromises is bad medicine and worse marketing.

Not in v1, by design. SMS review requests carry legal requirements (TCPA consent, carrier registration) that most practices don't want to own. Our system uses email plus a printed QR card for your front desk: your office sends requests from its own account using our templates, to patients you already have a relationship with. It asks for honest feedback, never for five stars, and never filtered to happy patients only.

If you can type your NPI, you can do this. The wizard takes a few minutes, and a human from our team handles everything after that, including the parts that usually make doctors close the laptop: domains, DNS, Google verification.

You get a confirmation email immediately, and a real person from DEOCAs contacts you within 4 business hours. Hour 0: your order enters production. By hour 24: internal quality review. By hour 48: your site is live, pending your final approval. You can reply to the confirmation email with your photo and logo at any point.

The wizard is built for individual providers (Type 1 NPIs). If you have an organizational NPI or a multi-provider group, contact us; we handle those as custom onboardings rather than forcing them through a flow built for solo physicians.

No, and be suspicious of anyone who promises that. What we guarantee is the work: a fast, accessible, professionally built site; a complete and optimized Google Business Profile; and an FTC-compliant review system your staff will actually use. Those are the inputs that reliably move the needle; the ranking itself isn't ours (or anyone's) to promise.