Privacy
Your wellness journey is personal.
We know that there are some things you want to keep private, which is why we never share any of your information with third parties. We’ve designed this platform to make sure that you can access support and complete mental health check-ins, without sharing more than necessary.
Any identifiable information you provide will be kept confidential and secure. It will only be shared with your care team if you request it to help support your mental health journey. Your data belongs to you, and if you decide to stop using the platform, you can take your data with you. Note that parents or guardians of students under the age of 18 may request access to their child’s data at any time.
Hope Health Systems, Inc. monitor results to ensure user safety. If they identify a resource or service that may benefit your mental health, they may reach out to you with that information. Participation in any suggested services is completely optional.
Your Privacy is Brightpath's Priority
Below are some of the measures that have been implemented to safeguard your privacy and information.
Secure Encryption
Data is encrypted in transit and at rest using AES encryption with 256-bit keys, as recommended by the US National Institute of Standards and Technology and Federal Information Processing Standard.
Access Monitoring
Network access is inspected in real time and permanently logged. Intrusion attempts are automatically identified and blocked , mitigating SSH attacks and other malicious behavior.
Password Protection
All password and security questions are cryptographically salted and hashed before storage. This means that they are heavily encrypted and are never stored in plain (viewable) text.
Database Backups
Database backups are automatically completed on a regular schedule. Databases are encrypted, backed up nightly, and stored in multiple locations.
Automatic Detection
The platform maintains a Host-based intrusion Detection (HIDS) system that automatically detects potential intrusions and anomalous activities. We immediately investigate, respond to and resolve any issues that are discovered.
Internal Policies
Comprehensive internal policies have been implemented to ensure privacy is maintained from an administrative perspective. All employees undergo extensive privacy and security training.
BrightPath is designed to be used by students and parents or guardians in Baltimore County. Students in grade 6 and above are able to access BrightPath on their own. For students in grade 5 and below, BrightPath is intended to only be accessed by parents or guardians. Parents or guardians have the option to explore BrightPath resources on their own or with their child, but only the parent or guardian is permitted to create an account.
All third-party resources on BrightPath undergo a thorough vetting process to ensure their safety, appropriateness, and effectiveness for students, parents and guardians. The vetting process is conducted by an independent expert consultant who has significant experience in the mental health sector, along with the appropriate credentials in health and well-being.
The consultant evaluates several key aspects of each resource, including safety (to ensure no harm or risks are presented), engagement (ease of use and time required), author credibility (verification of credentials and reliability), and evidence basis (supported by credible evidence). Any resource that requires account creation must have an agreement in place to ensure that the vendor meets appropriate privacy, security, and safety standards. Additionally, links to external resources shared on BrightPath will not direct users to content on social media platforms.
In addition to an initial review and screening prior to being made available on BrightPath, each resource is reviewed annually by an independent consultant to ensure ongoing adherence to the aforementioned standards.
No, BrightPath is available free of charge to all students and their parents or guardians. Funding for BrightPath was made available by the Maryland Community Health Resources Commission and the Maryland Consortium on Coordinated Community Supports.
No resource on BrightPath requires account sign-up or collects identifiable information unless it has been fully vetted and meets the stringent privacy and security standards, as described in the vetting process.
Yes, parents or guardians have the option to opt their child out of BrightPath’s services. Simply complete this opt-out form, and BrightPath will ensure that the child’s email is blocked from the platform within 24-48 hours.
If a user decides to stop using BrightPath, their data remains under their control and can be exported or deleted upon request. The platform does not retain a user’s data after they have requested their data or account to be deleted, and complies with all relevant privacy regulations.
Privacy and safety of users is a foundational component of the BrightPath platform. Greenspace, the technology provider that powers the platform, is SOC 2 Type II and HIPAA-compliant, exceeding local and federal privacy and security regulations. Greenspace supports hundreds of healthcare organizations, including school boards, private clinics, hospitals, and large health systems, and has passed extensive privacy and security reviews by reputable organizations such as Merakey, Sheppard Pratt, Catholic Charities, and UConn Health. Their privacy and security certifications and processes ensure that all personal information is safeguarded and exceeds privacy and security standards.
We value feedback from our users. If you have a suggestion for a new resource or concerns about an existing one, you can fill out our Feedback Form. We review all submissions carefully to ensure that we continue providing high-quality, effective resources for our users.
Yes, parents or guardians of students under 18 can access their child’s data by completing this form. Please include your child’s name, email address, as well as your full name. BrightPath will comply with all legal requirements, verify the identity of the requester, and then securely share the requested data.
The results of student check-ins are monitored by Hope Health Systems, Inc. for student safety and will remain confidential under health privacy laws (HIPAA).
For students in grade 6 and above, the information provided remains secure and is only shared with Hope Health Systems, Inc. Users always retain ownership of their data, and if they decide to stop using the platform, they can take their data with them.
Parents and guardians of students under 18 may request access to their child's data at any time - BrightPath will comply with all legal requirements, verify the identity of the requester, and then securely share the requested data.