Account deletion
Delete your ABACare account
ABACare accounts are created by the clinic that employs or serves you, not by you in the app. This page explains how to ask for your account to be deleted, what that deletes, and what the clinic must keep by law.
Who this is for
- Clinic staff. RBTs, BCBAs and administrators with an ABACare login.
- Parents and guardians. People with a family-portal login.
- A parent or guardian asking about a child's records. Deleting a child's clinical record is a request to the clinic. See the last section on this page.
ABACare is the app. It is a product of Maya Modest LLC, which operates it on behalf of the clinics that use it.
How to request deletion
Every route reaches the same queue.
In the app
Open Me, then Delete my account. It opens this page.
By email
Write to [email protected] with the subject Account deletion request. Give the email address on the account and the clinic name. Do not put a password, a child's name or any clinical detail in the email.
Through your clinic
Your clinic administrator can deactivate or remove you in ABACare and can ask us to delete the account.
How long it takes
- We acknowledge the request within 2 business days.
- We complete deletion of the items listed below within 30 days. (Pending counsel confirmation.)
- We tell you in writing when it is done and what was kept.
What is deleted
On an approved request for a staff or guardian account:
- Your sign-in. The authentication identity held by our authentication provider.
- Your profile. Name, email, phone number, role and notification preferences.
- Data on your device. The app's local cache and any queued, unsent captures are on your phone. Signing out and uninstalling removes them. They are not on our servers until sent, so an unsent capture is lost on uninstall: send it first, or tell your clinic.
- Crash reports that carry your user id. Deleted from our crash-reporting provider where the provider supports deletion by user id. (Pending counsel confirmation.)
- Your messages. See the section on messages below.
What is retained, and why
ABACare processes clinical records on behalf of the clinic. The clinic is the HIPAA covered entity and ABACare is its business associate. The clinic owns those records, and law and payer contracts require the clinic to keep them. Deleting your login does not delete them.
| Category | Why it is kept | Period |
|---|---|---|
| Session notes, trial and behavior data, treatment plans, goals and progress | Medical-record retention law, payer audit, and continuity of care | Pending counsel confirmation |
| Incident reports and mandatory-report triage records | Statutory reporting and safety obligations | Pending counsel confirmation |
| Billing, claims, authorizations and remittance | Payer audit, tax and fraud-prevention requirements | Pending counsel confirmation |
| Visit-verification records, including start and end location fixes | Medicaid and payer verification requirements | Pending counsel confirmation |
| Audit logs: who accessed or changed what, and when | Security and HIPAA accountability rules | Pending counsel confirmation. HIPAA requires documentation to be kept for 6 years. |
| Authorship of retained records | A note must keep showing who wrote it. Your name stays on records you wrote. Your login and contact details are removed. | Same as the record |
After the period ends, the clinic, or ABACare at the clinic's direction, deletes or de-identifies these records. Retained data is used only for the legally required purpose.
Messages
Care-team messages are part of the clinic's communication record. Staff messages about a client may be kept with the client's record for the same period. (Pending counsel confirmation: whether message threads fall under the record-retention rule or can be deleted when an account closes.)
Parents and guardians: your child's records
You can ask the clinic to access, correct or restrict your child's record under HIPAA. Deletion of a clinical record while it is within its retention period is not available, and the clinic can explain what it must keep. Contact the clinic's privacy officer, whose details are on the clinic's notice of privacy practices, or write to [email protected] and we will pass the request to them.
After deletion
- You can no longer sign in. Ask the clinic to create a new account if you need one.
- Deleting an account does not cancel the clinic's service. Billing for the clinic is unaffected.