Privacy Policy
Effective date: July 8, 2026
Defiant Health Privacy PolicyInformation We CollectA. Information You Provide to Us.B. Information We Collect When You Use Our ServicesC.Information We Receive from Other Sources.How We Use the Information We CollectHow We Disclose the Information We CollectCookies and TrackingSubprocessorsYour Privacy RightsData RetentionHealth Information and Prior Clinical ServicesChildren’s PrivacyInternational VisitorsChanges to this Privacy PolicyContact Information
Defiant Health Privacy Policy
Miga, Inc. ("Defiant Health," "we," "our," and/or "us") values the privacy of individuals who use our websites and related services (collectively, our "Services"). This privacy policy (the "Privacy Policy") explains how we collect, use, and disclose information from users of our Services ("Users"). Defiant Health provides business-to-business medical claims-analysis services to healthcare organizations, such as health insurers and risk-bearing provider groups. Much of the data we handle is provided to us by these client organizations for analysis on their behalf; our handling of that data is described in "Client-Provided Data" below.
Information We Collect
The website does not collect personal information through online forms. Below is the information we may collect.
A. Information You Provide to Us.
Contact information. The only way to contact us through the Site is by emailing our team (e.g., sales@defianthealth.com), typically for business or partnership inquiries. If you email us, we receive your name, email address, and the contents of your message.
Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.
Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.
B. Information We Collect When You Use Our Services
Device Information. We receive information about the device and software you use to access our Services, including IP address, device type, device identifiers, web browser type and version, and operating system version.
Usage Information. We automatically receive information about your interactions with our Services, like the pages or other content you view, referrer information, and the dates and times of your visits.
Information from Cookies and Other Tracking Technologies. We and our third-party partners collect information about your activities on our Services using cookies, pixel tags, or other tracking technologies. Cookie consent is managed through our consent management provider (TrustArc); see "Cookies and Tracking" below.
Usage Information. We automatically receive information about your interactions with our Services, like the pages or other content you view, referrer information, and the dates and times of your visits.
Information from Cookies and Other Tracking Technologies. We and our third-party partners collect information about your activities on our Services using cookies, pixel tags, or other tracking technologies. Cookie consent is managed through our consent management provider (TrustArc); see "Cookies and Tracking" below.
C. Information We Receive from Other Sources.
Under contracts with our client organizations, we receive data — including medical claims data that may contain protected health information (PHI) or personal information — to perform analysis on the client’s behalf. With respect to this data, we act as a service provider / business associate and process it only as permitted by our agreement with the client (including any Business Associate Agreement) and applicable law.
How We Use the Information We Collect
We use the information we collect to provide, maintain, secure, and improve our Services; to communicate with you and respond to inquiries; to perform claims-analysis services for our clients as directed under our agreements; to detect and prevent fraud, abuse, and security incidents; and to comply with legal obligations.
How We Disclose the Information We Collect
We do not sell personal information. We disclose information only as follows: to service providers / subprocessors who perform functions on our behalf under confidentiality obligations; to client organizations, with respect to data we process on their behalf; for legal and safety as required by law; and in connection with a business transfer.
Cookies and Tracking
We use analytics and consent-management cookies on our website. Cookie consent is managed through TrustArc; you can adjust your choices through the TrustArc consent controls.
Subprocessors
We engage the following subprocessors to support our website and operations: Webflow (website hosting), Google (Tag Manager/Analytics and Google Workspace), TrustArc (cookie consent), and Amazon Web Services (infrastructure). A current list is available upon request at the contact below.
Your Privacy Rights
Depending on your state of residence, you may have rights under applicable U.S. state privacy laws, which may include the right to access, correct, or delete your personal information and to opt out of certain processing. To exercise a right, contact us at the address below; we will respond as required by applicable law. Security of Your Information
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit and at rest, role-based access controls with multi-factor authentication, and monitoring of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit and at rest, role-based access controls with multi-factor authentication, and monitoring of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Client-provided data is retained and disposed of in accordance with the applicable client agreement.
Health Information and Prior Clinical Services
We do not collect health information through this website and do not currently offer clinical services through it. Health information created or received in connection with Defiant Health’s prior clinical service is retained and handled in accordance with HIPAA and our Notice of Privacy Practices. Former patients may contact us at privacy@defianthealth.com and we will respond to records requests as required by law.
Children’s Privacy
We do not knowingly collect personal information from children under 18, and no part of our Services is directed to children.
International Visitors
We operate solely in the United States. Our Services are intended for users located in the U.S., and all information we collect is processed and stored in the U.S. The Services are not directed to individuals outside the United States.
Changes to this Privacy Policy
We will post any changes to this Privacy Policy on this page, and the revised version will be effective when posted. If we materially change how we use or disclose personal information, we will provide notice as required by law.
Contact Information
If you have questions or wish to exercise your rights, contact us at privacy@defianthealth.com, or Miga, Inc. (d/b/a Defiant Health), 68 Harrison Ave Ste 605 PMB 83344, Boston, MA 02111.
Last Updated: July 7, 2026
CLARITY
Every cancer diagnosis deserves answers in days, not months — with the right plan, the right doctors, and Dana-Farber standards behind every step.
Talk to our teamStarts
Here
Every cancer diagnosis deserves answers in days, not months — backed by Dana-Farber's clinical intelligence. Defiant is how you get there.
Talk to our team