HIPAA Statement
Last Updated: August 25, 2026
This page explains how the Health Insurance Portability and Accountability Act ("HIPAA") relates to SJW Group, Inc., a New York corporation, d/b/a More Good Reviews ("MGR", "we", "us", or "our") and the More Good Reviews platform (the "Services").
1. Summary
HIPAA does not apply to MGR or the Services.
MGR is a review management platform. We are not a healthcare provider, health plan, or healthcare clearinghouse, and we do not offer the Services as a HIPAA Business Associate. The Services are not designed, intended, or warranted for creating, receiving, maintaining, or transmitting Protected Health Information ("PHI").
2. Why HIPAA Does Not Apply
HIPAA regulates Covered Entities (such as healthcare providers, health plans, and healthcare clearinghouses) and their Business Associates when they create, receive, maintain, or transmit PHI in connection with certain healthcare functions.
MGR:
- provides software for collecting and managing customer reviews, ratings, and related feedback;
- is not a Covered Entity under HIPAA; and
- is not a Business Associate under HIPAA in connection with the Services.
The data typically processed through the Services includes identifiers such as name, email address, and phone number, plus review content and related operational data Customer configures or imports. That processing is governed by our Privacy Policy and, where we act as a processor for business customers, our Data Processing Agreement—not by HIPAA.
3. No PHI; No Business Associate Agreement
Customers must not use the Services to collect, upload, store, display, or otherwise process PHI, medical records, or other health information regulated by HIPAA.
MGR:
- does not require PHI to provide the Services;
- does not knowingly create, receive, maintain, or transmit PHI;
- does not offer HIPAA-compliant services or environments; and
- does not enter into Business Associate Agreements ("BAAs").
If your organization is a Covered Entity or Business Associate, you are solely responsible for ensuring that your use of the Services does not involve PHI and otherwise complies with HIPAA and other applicable law.
4. Customer Responsibilities
By using the Services, you agree that:
- you will not submit, request, or instruct others to submit PHI through the Services;
- you will configure review requests, forms, imports, and integrations so they do not solicit or capture PHI; and
- if you become aware that PHI was submitted through your account, you will promptly remove it (or contact us for assistance) and take any other steps required by applicable law.
This is consistent with our Terms of Service restrictions on collecting or processing special categories of personal data without a lawful basis and our prior written agreement where required. See our Terms of Service and DPA.
5. Related Policies
For how we handle personal information outside the HIPAA context:
- Privacy Policy — MGR as a controller for account and website data
- Data Processing Agreement — MGR as a processor for customer end-user data
- Sub-processors — vendors that help us deliver the Services
- DSAR — privacy rights requests
6. Contact
Questions about this statement: legal@moregoodreviews.com
SJW Group, Inc., a New York corporation, d/b/a More Good Reviews
525 E 14th St 7H
New York, NY 10009
United States