Data Policy

Last updated: June 1, 2026

Our role

ProMed Source LLC operates as an equipment acquisition intermediary. We facilitate transactions between healthcare facilities selling surplus equipment and qualified buyers. We do not operate, repair, refurbish, or provide clinical services on acquired equipment.

Data on acquired devices

ProMed Source does not access, extract, process, or store data from any device we acquire. We are not a data processor or business associate under HIPAA with respect to any device data.

Seller responsibility

Selling facilities are responsible for ensuring that all patient data, protected health information (PHI), and any other sensitive data is removed from devices in accordance with their own data governance policies, HIPAA obligations, and applicable regulations prior to equipment transfer. ProMed Source strongly encourages all sellers to perform data sanitization before equipment leaves their facility.

Downstream handling

Equipment acquired by ProMed Source is resold to qualified dealers and buyers. ProMed Source does not control or represent the data handling practices of downstream buyers. Sellers who require confirmation of data destruction should perform sanitization prior to transfer and retain their own documentation.

Questions

If you have specific questions about data handling as it relates to your facility's compliance requirements, we encourage you to consult your facility's privacy officer or legal counsel. We are happy to discuss our process in more detail.