Privacy

Last updated November 2, 2026.

MedCostMap is the Medicare procedure price lookup and medical-travel cost comparison on this website. The header calls the site medicase. The only operator name published in this project is Saga Dog Corp (“a Saga Dog Corp project”). This page describes what the application actually does today. It does not add company details that are not in the project.

Waitlist

Lookups stay free. Saved comparisons, alerts, and a human review are not for sale yet. The waitlist form is how you ask to hear when those extras open. Joining sends this site:

• Email (required). It is trimmed, stored in lowercase, and must look like an email address of at most 254 characters.
• Name (optional). Extra spaces are collapsed and it is cut at 80 characters. You can leave it blank.
• Plan (optional). Only alerts (saved comparisons and alerts), review (human review), or both are kept. Any other choice is stored as no plan.
• Source (optional). The page sends the utm_source value from the link you opened, or site when that value is absent. Characters other than letters, numbers, underscore, dot, and hyphen are removed, and the result is cut at 40 characters. If nothing remains, no source is stored.
• Honeypot. A hidden field named website is there to catch bots. If it is filled in, the request is rejected and nothing is saved.

The application does not send a confirmation email, and it does not take payment. The purpose of the email is to tell you when those plans open. The plan records which extra you asked about. The source records which link the signup came from.

How the waitlist is stored

Signups are meant to be stored in a Neon Postgres database, in a table named medicase_waitlist. A row has an id, the email (one row per email), the name, the time you signed up, the plan, and the source.

No database is connected right now. The waitlist is closed. A signup request gets HTTP 503 and the message “The waitlist isn't open yet. Please check back soon.” Nothing is written down. GET /api/waitlist answers only whether the list is open. It does not list emails.

When a Neon database is connected, the site sends the row to Neon over Neon’s HTTPS SQL endpoint. If the same email signs up again, a new plan can fill in or replace the stored plan. The stored name and source stay as they were on the first signup. The application code does not delete rows on a schedule.

Lookups and comparisons

This application does not save procedure searches, Medicare price lookups, or travel comparisons in a database. They are not attached to a waitlist email. There is no account and no password.

• A search word or a procedure code is sent to the public CMS data API at data.cms.gov (Medicare Physician & Other Practitioners, by Geography and Service) so the page can show Medicare averages. Your name and email are not part of that request.
• A currency code for the country you picked may be sent to Frankfurter (api.frankfurter.dev), which republishes European Central Bank reference rates. That request is the currency code only.
• State Department per diem rates are copied into this project. Choosing a city does not contact the State Department.
• Airfare is a number you type. It is used in the total on the page. It is not sent to an airline or a flight-price service.

Successful public lookup responses are cached at the edge for 24 hours and may be served stale for up to a week while a fresh copy is fetched. Those cached responses do not include your email or name. Links you choose to open (source articles, CMS, the State Department, Frankfurter, or the Joint Commission International search) leave this site. Those sites have their own practices.

Vercel Web Analytics

Each page loads Vercel Web Analytics from /_vercel/insights/script.js. This site’s code does not send custom analytics events, does not set its own cookies, and does not use browser storage.

Vercel’s Web Analytics privacy documentation says the product does not use third-party cookies. Vercel says a visit is identified with a hash of the incoming request, that this session hash is discarded after 24 hours, and that a page view is not tied to your name, email, or IP address. Vercel says a page view may include the time, the page address, the referrer, filtered query parameters, approximate location (country, region, and city), operating system, browser, and device type. A utm_source on the link you opened can therefore be part of that page view. Do not put an email address or health details in the page address. This site has not added extra redaction on top of what Vercel does. Vercel hosts the site and processes these page views. The operator can see Vercel’s aggregated statistics. This application’s code does not store a copy of the analytics record, and it does not write down your IP address.

No health records or PHI

MedCostMap does not collect health records or protected health information. It does not ask for a diagnosis, symptoms, medications, a Medicare or insurance ID, a Social Security number, a date of birth, a phone number, or a postal address. A procedure code you look up is a public billing code. It is not stored as a record about you. Please do not type health information into the name field.

Data is not sold

Saga Dog Corp does not sell personal information. The waitlist is not rented or traded, and it is not sent to advertisers. The processors wired up in this project are Vercel (hosting and Web Analytics) and, once a database is connected, Neon (storing the waitlist). CMS and Frankfurter receive only the lookup described above.

How to ask for deletion

When a contact is listed here, write to it and name the email address you used on the waitlist. The operator should delete that row — the email, name, plan, source, and signup time — from medicase_waitlist. While the database is not connected, there is no row to delete.

Changes

We may update this page by posting a new version here and changing the date at the top. The matching rules for using the site are on the Terms of Use.