EHR & Health Data Systems · EHR Vendor (Ambulatory/Practice) · Structural / no discrete incident
DrChrono (EverHealth / EverCommerce)
Headline
No DOJ, OCR, FTC, state AG, information-blocking or breach finding against DrChrono was verified this pass.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
No DOJ, OCR, FTC, state AG, information-blocking or breach finding against DrChrono was verified this pass. The finding is structural, in its customer terms (last modified Oct 5, 2026). DrChrono's total liability is limited to the fees the practice paid in the previous 3 months. Order Forms renew automatically, and without-cause termination requires 60 days' written notice before the end of the term. If DrChrono terminates for non-payment or an uncured breach, the practice can owe the monthly fees for every remaining month. After termination, practice data 'may be retained for 30 days and then destroyed', so a small practice that misses the window can lose its records. Assisted exports may be billed at 'reasonable costs' (self-service export is free).
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-15
Primary source. www.drchrono.com/terms/ — Unverified - heuristic first draft.
Terms
Arbitration
No arbitration clause, class waiver or jury waiver found in the customer terms. Colorado law; exclusive federal venue in Denver. Liability capped at 3 months of fees.
Data sharing
Privacy Policy effective Aug 14, 2024; detailed sharing not reviewed this pass.
Fees and billing
Automatic renewal; 60-day notice before term end; a payment of all remaining months' fees on termination for cause; assisted data-export costs; 30-day post-termination retention then destruction.
Contacts
Privacy contact. privacy@drchrono.com; (844) 569-8628
Legal notice. Parent EverCommerce Inc. (Delaware) principal executive offices per its 2025 Form 10-K: 3601 Walnut Street, Suite 400, Denver, CO 80205. The DrChrono privacy policy itself lists no street address (phone (844) 569-8628). Use the notice clause in the signed Order Form/terms and the registered agent of EverHealth Solutions Inc.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| Company customer agreement · 2026-10-05 www.drchrono.com/terms/ | whole row | Unassigned | confirmed | “Customer Content may be retained for 30 days and then destroyed.” Quote basis: not recorded. |
| Company privacy policy · 2024-08-14 www.drchrono.com/privacy/ | whole row | Unassigned | confirmed | “Effective Date: August 14, 2024” Quote basis: not recorded. |
| Secondary (Wikipedia) · 2026-10-14 en.wikipedia.org/wiki/DrChrono | whole row | Unassigned | confirmed | “The acquisition closed on November 18, 2021.” Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://www.drchrono.com/privacy/ | Not fetched yet | NOT CONFIRMED |
| Terms of service https://www.drchrono.com/terms/ | Not fetched yet | NOT CONFIRMED |
| Website https://www.drchrono.com/ | Not fetched yet | — |
| Primary source https://www.drchrono.com/terms/ Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
Headquarters on file: CA. Provisions of CCPA/CPRA on file:
| Provision | Type | Source |
|---|---|---|
| Right to Deletion Cal. Civ. Code § 1798.105 | hard | source |
| Right to Correction Cal. Civ. Code § 1798.106 | hard | source |
| Right to Know / Access Cal. Civ. Code § 1798.110 | hard | source |
| Right to Limit Use of Sensitive Personal Information Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027 | hard | source |
| Right to Data Portability Cal. Civ. Code § 1798.130(a)(3)(B)(iii) | hard | source |
| Privacy Policy / Privacy Notice Requirements Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011 | hard | source |
| Sensitive Personal Information — Categories Cal. Civ. Code § 1798.140(ae) | hard | source |
| Service Provider and Contractor Contract Requirements Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051 | hard | source |
| Applicability Threshold (2025 CPI-Adjusted) Cal. Civ. Code § 1798.140(d) | threshold | source |
| Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026) Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157 | hard | source |
| Right to Opt Out of Sale or Sharing Cal. Civ. Code §§ 1798.120, 1798.135 | hard | source |
| Sale vs. Sharing Distinction Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah) | hard | source |
| Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted) Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206 | hard | source |
| Notice at Collection Cal. Code Regs. tit. 11, § 7012 | hard | source |
| Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026) Cal. Code Regs. tit. 11, §§ 7120-7124 | hard | source |
| Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16) | hard | source |