PointClickCare

PointClickCare is the dominant records system in US nursing homes. In 2021 it said it served about 65% of US skilled nursing facilities. A federal court found it likely broke the federal rule against blocking health data. Real Time Medical Systems, a data-analytics company that works for nursing homes, sued after PointClickCare began showing its automated logins CAPTCHA images that couldn't be solved and deactivating its accounts. In July 2024 a Maryland federal court ordered PointClickCare to stop. The Fourth Circuit affirmed in 2025 (131 F.4th 205) and denied rehearing en banc on April 23, 2025. The appeals court noted that PointClickCare conceded indecipherable CAPTCHAs meet the definition of 'information blocking' unless an exception applies. The court found no exception applied, and said the blocking matched the time PointClickCare entered Real Time's market as a competitor. This was a preliminary-injunction ruling in a business dispute, not a regulator's penalty. For families of nursing-home residents, it shows a vendor controlling whether a facility's chosen tools can reach a resident's chart. No breach or consumer-privacy enforcement action against PointClickCare was found this pass, but searching was limited.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-10-15

Case status. Private litigation; the legal tier of its sources has not been assigned yet.

Primary source. www.mcdermottlaw.com/insights/pointclickcare-denied-en-banc-hearing-to-overturn-preliminary-injunction-mandating-access-to-ehr-data/ — Unverified - heuristic first draft.

Arbitration

None found in the website privacy policy or the Terms & Conditions landing page. B2B terms are in the MSA PDF, not reviewed.

Data sharing

Holds resident charts, medications, assessments and billing for long-term and post-acute care facilities as a HIPAA business associate ('Our U.S.-based customers are required to sign a BAA with us'). Its privacy policy covers only data 'manually submitted to, or automatically collected by' PointClickCare through its Site and Services. Resident PHI is governed by facility contracts. The court record shows it restricted third-party access to facility-hosted EHR data.

Contacts

Privacy contact. legal@pointclickcare.com

Legal notice. PointClickCare Technologies Inc., 5570 Explorer Drive, Mississauga, Ontario, Canada L4W 0C4 (per privacy policy). US registered agent not verified this pass.

Mailing address. Not recorded.