John,
Turns out...it was me who allowed this to happen! Here are the details:
1. Alaska REC offered to pay Amazing Charts on behalf of our clients in Alaska. This money is from the government HITECH act (aka our taxes), and RECs can do with it what they deem necessary to get practices to achieve the Meaningful Use. Thus far, only Alaska has approached us with such a good offer for our clients.
2. I decided that this offering to our Alaska clients was worth notifying them about it, and was not a sham or other marketing ploy.
3. I sent the following email in May to all our clients in Alaska (at that time we had about 40 unique practices in Alaska):
Amazing Charts has recently partnered with the Alaska Regional Extension Center, formally known as AeHN. We have partnered because they have been funded by the government to bring physicians to Meaningful Use. As such, they can assist with questions and other information to help you determine what is needed if you are going to apply for the stimulus money.
As an added benefit, they also are covering a year of Amazing Charts support on your behalf, if you so desire. The catch - it costs $100 to join.
I'm emailing you to be sure you are comfortable with us providing them your practice name and email address so they can provide you more details of what they are offering. We have done our due diligence and am comfortable that these guys are legit and can actually assist you with Amazing Charts if need be.
Please let me know if you would prefer us not to provide your information to them.
Jon
4. I received one or two requests not to release info, and removed those practices from the list we prepared and sent to the Alaska REC. That list included the practice and owner's name, email, address, phone, licensed users, specialty, and annual support renewal date.
5. What's wrong with this picture: having our clients actively opt-OUT is a bad approach. At the time I felt that the offer to pay on behalf of clients was worth it for clients. That was a mistake that we have not made since.
From a privacy standpoint, Amazing Charts now assumes that every practice does not want any of their info passed to any third-party unless they actively provide consent to do so. Having users contact me to opt-OUT (rather than contact me to OPT-IN) was a bad move and won't happen again.
Instead, we have/will forward emails from RECs to our clients, but not provide the RECs our actual list of clients.
I want to formally apologize for allowing this to occur. It is a slippery slope, and I totally agree that we must remain truly vigilant to avoid casually releasing information that could possibly be deemed private.
Jon