Privacy
Your wellness journey is personal.
We know that there are some things you want to keep private, which is why we never share any of your information with third parties. We’ve designed this platform to make sure that you can access support and complete mental health check-ins, without sharing more than necessary.
For students in Grade 6 and above, any identifiable information you provide will be kept confidential and secure. It will only be shared with your care team if you request it to help support your mental health journey. Your data belongs to you, and if you decide to stop using the platform, you can take your data with you. Note that parents or guardians of students under the age of 18 may request access to their child’s data at any time.
Upper Bay Counseling and Support Services, Inc. monitor results to ensure user safety. If they identify a resource or service that may benefit your mental health, they may reach out to you with that information. Participation in any suggested services is completely optional.
Prioritizing Privacy
Below are some ways we are prioritizing your privacy.
Automatic Detection
The platform maintains a Host-based intrusion Detection (HIDS) system that automatically detects potential intrusions and anomalous activities. We immediately investigate, respond to and resolve any issues that are discovered.
Database Backups
Database backups are automatically completed on a regular schedule. Databases are encrypted, backed up nightly, and stored in multiple locations.
Password Protection
All password and security questions are cryptographically salted and hashed before storage. This means that they are heavily encrypted and are never stored in plain (viewable) text.
Access Monitoring
Network access is inspected in real time and permanently logged. Intrusion attempts are automatically identified and blocked , mitigating SSH attacks and other malicious behavior.
Frequently Asked Questions
BrightPath is designed to be used by students and parents or guardians in Cecil County. Students in grade 6 and above are able to access BrightPath on their own. For students in grade 5 and below, BrightPath is intended to only be accessed by parents or guardians. Parents or guardians have the option to explore BrightPath resources on their own or with their child, but only the parent or guardian is permitted to create an account.
No, BrightPath is available free of charge to all students and their parents or guardians. Funding for BrightPath was made available by the Maryland General Assembly under the Blueprint for Maryland’s Future (Ch. 36 of 2021).
All third-party resources on BrightPath undergo a thorough vetting process to ensure their safety, appropriateness, and effectiveness for students, parents and guardians. The vetting process is conducted by an independent expert consultant who has significant experience in the mental health sector, along with the appropriate credentials in health and well-being. The consultant evaluates several key aspects of each resource, including safety (to ensure no harm or risks are presented), engagement (ease of use and time required), author credibility (verification of credentials and reliability), and evidence basis (supported by credible evidence). Any resource that requires account creation must have an agreement in place to ensure that the vendor meets appropriate privacy, security, and safety standards. Additionally, links to external resources shared on BrightPath will not direct users to content on social media platforms. In addition to an initial review and screening prior to being made available on BrightPath, each resource is reviewed annually by an independent consultant to ensure ongoing adherence to the aforementioned standards.
Privacy and safety of users is a foundational component of the BrightPath platform. Greenspace, the technology provider that powers the platform, is SOC 2 Type II and HIPAA-compliant, exceeding local and federal privacy and security regulations. Greenspace supports hundreds of healthcare organizations, including school boards, private clinics, hospitals, and large health systems, and has passed extensive privacy and security reviews by reputable organizations such as Merakey, Sheppard Pratt, Catholic Charities, and UConn Health. Their privacy and security certifications and processes ensure that all personal information is safeguarded and exceeds privacy and security standards.
The results of student check-ins are monitored by Upper Bay Counseling and Support Services for student safety and will remain confidential under health privacy laws (HIPAA).
For students in grade 6 and above, the information provided remains secure and is only shared with Upper Bay Counseling and Support Services. Users always retain ownership of their data, and if they decide to stop using the platform, they can take their data with them.
Parents and guardians of students under 18 may request access to their child's data at any time - BrightPath will comply with all legal requirements, verify the identity of the requester, and then securely share the requested data.
No resource on BrightPath requires account sign-up or collects identifiable information unless it has been fully vetted and meets the stringent privacy and security standards, as described in the vetting process. If a resource does require account creation and collects identifiable information of users, a formal legal agreement must be entered into between Greenspace and the third party vendor, in order to ensure user data security and privacy standards. Currently, Calm and Lucero are the only resources on BrightPath that fall into this category.
Yes, parents or guardians of students under 18 can access their child’s data by completing this form. Please include your child’s name, email address, as well as your full name. BrightPath will comply with all legal requirements, verify the identity of the requester, and then securely share the requested data.
Yes, parents or guardians have the option to opt their child out of BrightPath’s services. Simply complete this opt-out form, and BrightPath will ensure that the child’s email is blocked from the platform within 24-48 hours.
We value feedback from our users. If you have a suggestion for a new resource or concerns about an existing one, you can fill out our Feedback Form. We review all submissions carefully to ensure that we continue providing high-quality, effective resources for our users.
If a user decides to stop using BrightPath, their data remains under their control and can be exported or deleted upon request. The platform does not retain a user’s data after they have requested their data or account to be deleted, and complies with all relevant privacy regulations.