WorkMinty.com

Trust & compliance

Health data guidance for small business

WorkMinty helps small businesses run scheduling, payroll, and books. Many acupuncture and wellness clinics use Engage for appointments and customers. This page explains what our Standard product is for—and what it is not.

This page is general guidance, not legal advice. HIPAA and state privacy rules depend on your practice. Consult a qualified attorney or compliance advisor for your situation.

WorkMinty Standard (default)

Standard WorkMinty is designed for business operations: appointment scheduling, customer contact details, invoices, payroll, and bookkeeping. It is not a certified electronic health record (EHR) and is not marketed as HIPAA-compliant on Standard. Do not store protected health information (PHI)—such as diagnoses, treatment notes, symptoms, lab results, or insurance clinical details—in Engage notes, custom fields, or attachments unless you have a signed Business Associate Agreement (BAA) with us for a HIPAA tier.

What counts as protected health information (PHI)?

PHI is health information that identifies a person and relates to their past, present, or future health, care, or payment. Examples: “patient has hypertension,” acupuncture point prescriptions tied to a named patient, clinical intake with symptoms, or insurance authorization details. Scheduling “Jane — 60 min follow-up acupuncture” without clinical detail is usually lower risk, but free-text notes can easily become PHI.

Acupuncture & wellness clinics

Many acupuncture practices are HIPAA covered entities. A common setup: keep clinical charts in your EHR or paper records; use WorkMinty Engage for booking, reminders, retail, and payments; use WorkMinty Payroll for staff pay. In Engage Setup → Calendar, choosing the acupuncture clinic profile shows an in-app checklist. Appointment notes in Engage should be limited to business scheduling (room, running late, etc.), not treatment documentation.

HIPAA tier (when available)

If your clinic must store PHI inside WorkMinty, contact support@workminty.com before entering that data. A HIPAA tier requires a BAA, documented security controls (audit logging, encryption, incident response), and subprocessors under agreement. Until a BAA is in place, treat Engage as scheduling and business software only.

OSHA

OSHA workplace safety rules apply to you as an employer (needle disposal, bloodborne pathogens training, injury reporting)—not to payroll or scheduling software. WorkMinty does not replace your clinic’s OSHA obligations or safety programs.

Questions

For HIPAA tier interest, security questions, or to report a concern: support@workminty.com. For product help, use in-app support or your account hub.

Engage product overview · Home