Training › For partner organizations › Safeguarding and privacy
PARTNER
Data Privacy and Confidentiality in B2B Partnerships
A family trusts you because they trust your organization. Holding the line on what you share is how that trust survives the first hard week.
This module is for partner staff. You are not delivering care. You are not an iCaria certified provider. You are the trusted person at a community organization who told a family about iCaria, and now you may carry a small amount of information about that family inside your portal view.
This is one short lesson on the boundary. What you can see. What you can keep. What you can say. And what has to go through the advocate or iCaria safeguarding instead.
Why this matters
A family at the Davila gathering in Scarborough, or the Khalil family who came through your Montreal Nord clinic, trusts you because they trust your organization. The moment they say yes to a referral, they hand you a small piece of their private life. That piece is yours to hold, not yours to pass around.
Platform Onboarding is mandatory for every partner staff account before you can submit or receive referrals through the platform. This is the privacy module inside it.
What your portal view actually shows you
Your partner staff account is a referral surface, not a care surface. The portal is built around that line.
You can see
- The fact that the referral exists, and its status (submitted, accepted, active, closed).
- The name of the advocate assigned to the family.
- The messaging thread between your organization and the advocate, scoped to that referral.
- The basic family contact you supplied at referral time.
You cannot see
- The full care plan the advocate keeps with the family.
- Medical detail about the older adult in the home.
- The provider roster or the booking schedule.
- Payment records, invoices, or any financial detail.
This is by design. You are the warm hand-off, not the chart owner. The care plan lives with the advocate, the family, and the providers delivering the work. The line keeps the family's medical and financial life out of any system other than the one that strictly needs it.
If you find yourself wanting to see more. That instinct is usually a good one. It means you care about the family. The next step is to message the advocate inside the portal thread and ask the specific question. The advocate will answer what is appropriate to share. They will not forward the chart.
What your organization may keep, and what stays inside iCaria
Your organization has its own records. Those records existed before iCaria and will outlive any single referral. The question is what is appropriate to copy out of the portal and into your case file, and what is not.
Appropriate to keep in your own records
- The fact that you made a referral, and the date.
- Your organization's own internal case note (what your colleague observed, what brought the family in).
- The referral status as you understood it at last check.
- Your follow-up plan from your organization's side.
Stays inside iCaria
- The older adult's medical detail and care plan.
- Advocate notes about the family.
- Provider names and the booking schedule.
- Any payment or invoice information.
If you ever feel the urge to paste a section of the advocate's note or the elder's health detail into your organization's case file, stop. That information is governed by the family's agreement with iCaria, not by your organization's privacy policy. The two are not interchangeable.
And remember the money piece. iCaria does not charge your organization. The family pays. You therefore have no payment records to retain about iCaria bookings, because none flow through you.
Answering a question about a family
A colleague stops you in the hallway. A daughter calls your office. Another agency emails asking for an update on the Diaz family in East Houston. How do you answer without disclosing more than the family agreed to share?
The starting position is a short list of things you can confirm, and a longer list of things you cannot.
You can confirm
- That your organization made a referral, if your organization's own policy allows you to say so to that person.
- The general status as you understood it at last check (active, closed), if you would have shared that level of detail before iCaria was involved.
You redirect
- Any question about the care plan, the providers in the home, or the schedule. That goes to the advocate.
- Any question about the elder's health, mood, or how a visit went. That goes to the advocate or to the family directly.
- Any question about money, the fee the family pays, or invoices. That stays between the family and iCaria.
- Any question that sounds like a safety concern. That goes to safeguarding.
The short script that works in almost every case: "I made the referral. For anything about how the care is going, the right person to ask is the family's advocate. I can pass on a message inside the iCaria portal if that helps."
Two jurisdictions, one floor. iCaria operates in Canada under PIPEDA, and in the United States state by state, with HIPAA where it applies. Your organization may sit under any of those, plus your own internal policy. The iCaria partner agreement is the floor, not the ceiling. If your organization's policy is stricter, follow yours.
When to redirect to the advocate, and when to escalate to safeguarding
Most questions that come at you about a referred family have one of two right answers: the advocate, or safeguarding. Knowing which one in the moment is the judgment call this module is preparing you for.
The advocate is the right path when
- The question is about how the care is going.
- The family wants a change to the schedule or to the provider.
- A colleague at your organization wants context that you do not have.
- The family is unhappy about something that is not a safety issue.
Safeguarding is the right path when
- You see or hear signs of harm, neglect, or unsafe conditions affecting the older adult.
- A family member or a third party tells you something that suggests the older adult is at risk.
- You are unsure whether what you are looking at is a safety issue, and your gut says it might be.
Safeguarding is not a conversation you finish in the hallway. If a question feels like a safeguarding question, route it. Do not try to answer it in the moment because the family member is in front of you. The Safeguarding for Partners module covers the full path. This module hands off to it.
Portal messaging vs picking up the phone
The portal messaging thread is a written record. Every message is logged, time-stamped, and retained. Treat it like a written record from your own organization. That is its strength and its constraint.
Use portal messaging for
- Anything you would put in writing to a colleague about a case.
- Status checks, schedule confirmations, follow-up questions.
- Hand-offs where the next person needs to be able to read what you said.
Pick up the phone (and then log a brief portal note) for
- A sensitive family situation that deserves a human voice.
- A nuanced question that would take ten messages to resolve.
- Anything urgent that needs the advocate now, not when they next open the portal.
After a phone call about a referred family, write a short portal message summarizing what was decided, so the record holds. "Spoke with Sylvie at 2pm. Agreed to revisit the Khalil schedule next Tuesday." That is the shape.
The shape of a good week, in one paragraph
You answer the colleague who asks about the Davila family with the short script. You message the advocate inside the portal thread when you have a question that needs an answer. You keep your organization's own case note on your own system. You leave the care plan and the medical detail and the invoices inside iCaria, where the family agreed for them to live. When something feels like safety, you route it to safeguarding without trying to handle it yourself. That is a good week. The trust the family placed in your organization is intact at the end of it.
Key takeaways
- Your portal view shows the referral, the advocate name, and the messaging thread. It does not show the care plan, medical detail, or payment records, by design.
- Keep the fact of the referral and your organization's own case note in your own records. Leave medical detail, advocate notes, and any payment information inside iCaria.
- Answer questions about a family with the short script: confirm the referral, redirect care questions to the advocate, send safety concerns to safeguarding.
- Portal messaging is a logged written record. Use it like one. Pick up the phone for sensitive or urgent moments, and log a brief summary afterwards.
- iCaria's partner agreement is the privacy floor, not the ceiling. If your jurisdiction (PIPEDA in Canada, HIPAA where applicable in the US) or your organization's policy is stricter, follow the stricter one.
Finding this again Open Training from your partner portal any time. This is a short reference module, with no quiz.