PRIVACY POLICY
Last updated: October 13, 2026
This Privacy Policy explains how Optimum Medical Response (OMR LLC) ("OMR," "we," "us," or "our") collects, uses and shares information when you ride with us, use our mobile apps OMR Ride (for riders) and OMR Drive (for our drivers), receive our text messages, or visit omrva.com. OMR is a non-emergency medical transportation (NEMT) provider operating in the Commonwealth of Virginia.
In short:
-
We use your information to schedule, carry out and bill your rides, and to keep you informed about them.
-
OMR Ride does not collect your location. OMR Drive shares a driver’s location with OMR while the driver is signed in.
-
We share information only with the people and organizations involved in your trip, and with the service providers that run our systems for us.
-
We do not sell personal information, and we do not use it for advertising.
-
You can delete your OMR Ride account in the app at any time (see how).
1. INFORMATION WE COLLECT
1.1 Rider and trip information
Most information about riders comes to us from the organization that arranges the ride, such as a Medicaid transportation broker, a managed care plan or a healthcare facility, or from you or your caregiver when you book a ride with us. It can include:
-
your name, phone numbers and date of birth;
-
your member or Medicaid ID;
-
pickup and drop-off addresses, pickup times and appointment times;
-
mobility needs (for example a wheelchair, a walker or an attendant) and notes needed to carry out the ride.
Some of this information is health-related, for example that you travel to a medical appointment, the facility you visit, or a mobility need. We use it only to provide, coordinate and bill your transportation.
We also create information while providing rides: the status and times of each trip, the driver and vehicle assigned, where a trip was started, picked up and completed, signatures captured at pickup or drop-off, ratings, and notes from our office.
1.2 OMR Ride (rider app)
-
Sign-in. You sign in with the phone number and date of birth on your rider record, then a 4-digit PIN you create. We store your PIN only in a scrambled form (a salted hash) that cannot be turned back into the PIN.
-
Profile photo (optional). If you add one, the drivers of your trips see it. We resize it and remove its hidden details, such as where it was taken. You can change or remove it at any time.
-
What you do in the app: ratings and comments about completed rides, rides you cancel, feedback you send us, and your notification setting.
-
Device information: your phone’s notification token (so we can send trip notifications), the app version, your phone’s operating system, and a random identifier created when you install the app. We use the identifier to recognize your phone at sign-in and to slow down repeated wrong guesses.
-
Security information: the IP address and outcome of sign-in attempts, used to protect accounts from guessing. For this purpose IP addresses are stored only in a scrambled form.
-
Crash reports: if the app stops working, it sends us a technical report (app version, operating system and the error) together with your account number.
OMR Ride does not collect your location and never asks for location permission. It does not read your contacts. It uses your camera or photo library only when you choose to add a profile photo.
1.3 OMR Drive (driver app)
OMR Drive is used by OMR drivers. It collects:
-
Account information: name, email address, phone number, birthday and profile photo. Your password and optional sign-in PIN are stored only as salted hashes.
-
Location. While you are signed in to OMR Drive, the app shares your phone’s precise location with OMR, including when the app is closed or running in the background if you allow location access “all the time.” Signing out stops it. We use it to dispatch trips, show your position to our dispatch office, estimate arrival times, record trip events, report trip progress to the organization that arranged a trip, and show a rider where their ride is during their trip.
-
Trip activity: when you start a trip, arrive, pick up, drop off, mark a no-show or cancel, and where you were at the time.
-
Photos and documents: vehicle inspection and damage photos, photos and files you send in chat, and documents you read and sign in the app.
-
Rider signatures captured on your phone at pickup or drop-off.
-
Work records: time clock entries, days off and trip swap requests, emergency (SOS) alerts and messages with our dispatch office.
-
Voice assistant. If you use it, your phone turns your speech into text: on the phone where it supports that, otherwise through Apple’s or Google’s speech service. OMR does not record or store audio; only the resulting command (for example, a message to dispatch) reaches us.
-
Device information and crash reports: notification token, app version, operating system, whether background location is allowed, and technical error reports.
1.4 Our website, servers and text messages
Our servers record basic technical information about each request (such as the IP address, the app or browser version and the page or feature requested) to keep our services running and secure. The website omrva.com does not use advertising or analytics trackers. Pages that show a map load Google Maps, which receives your IP address under Google’s privacy policy.
If you agree to receive text messages, we keep your mobile number and your consent and opt-out choices, as described in the notice above and on our Text Messaging (SMS) Terms page.
2. HOW WE USE INFORMATION
-
To schedule, dispatch and carry out rides, and to keep riders informed through app notifications and text messages.
-
To confirm who you are when you sign in, and to protect accounts from guessing.
-
To bill trips and report them to the broker, health plan or other payer, as our contracts and Medicaid rules require.
-
To review service quality, safety and complaints, including ratings and comments.
-
To fix problems and improve our apps and services.
-
To comply with the law and respond to lawful requests.
3. HOW WE SHARE INFORMATION
We share information only as described here.
-
Drivers and our office. Drivers see the rider details needed for their trips (such as name, phone number, addresses, times, mobility needs, notes and the rider’s profile photo, if added). Our dispatch and office staff see the trip and account information their role needs to run the service.
-
Riders, about their driver. For a rider’s trip, OMR Ride shows the assigned driver’s first name and last initial, profile photo, vehicle, experience and a general rating label, and, while the trip is under way, the driver’s live location and estimated arrival time. Riders can call their driver from the app; the call goes to the phone number the driver has on file with OMR.
-
The organization that arranged the trip (a transportation broker, managed care plan, healthcare facility or other payer). Depending on its requirements we send trip status and times, cancellations (including rides you cancel in OMR Ride), the vehicle’s location while the driver is working that organization’s trips (including between its trips on the same day), the driver’s license number, the vehicle identification number (VIN), and rider signatures as proof that a trip took place.
-
Service providers that run our systems for us and may use the information only to do so: our hosting provider; Cloudflare (network and security); Google Firebase Cloud Messaging (app notifications); Mapbox (maps, routes and travel time estimates); Twilio (text messages); and Apple and Google (app distribution, and in OMR Drive, speech recognition when the phone cannot do it itself). In OMR Drive, Mapbox’s map software may also send Mapbox usage and location data under Mapbox’s own privacy policy; in OMR Ride we have turned this off.
-
Legal and safety reasons: when the law requires it, to respond to lawful requests, or to protect the safety of riders, drivers or others.
-
Business transfers: if OMR is merged, sold or reorganized, information may be transferred as part of that transaction, subject to this policy.
We do not sell personal information, and we do not share it for advertising.
No mobile or messaging consent information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4. HOW LONG WE KEEP INFORMATION
-
Trip records, including signatures and the locations of trip events, are kept for as long as our contracts, Medicaid rules and the law require us to keep transportation and billing records.
-
Driver location history is deleted after 24 hours. Only the driver’s latest position and the locations recorded with trip events are kept.
-
Activity records (sign-ins, changes and actions in our systems) are kept for 30 days to about 13 months, depending on the type of record.
-
Counts of wrong PIN entries are kept for up to 90 days.
-
OMR Ride account information is kept until you delete your account (see section 6).
-
Backups are kept for a limited time and then overwritten.
5. HOW WE PROTECT INFORMATION
-
All connections between our apps, our website and our servers are encrypted (HTTPS).
-
PINs and passwords are stored only as salted hashes.
-
Access is limited by role: staff see only the information their work needs.
-
Sign-in attempts are limited, and repeated failures pause or lock the account.
No system is perfectly secure. If we learn of a security breach that affects your information, we will notify you as the law requires.
6. YOUR CHOICES AND RIGHTS
In OMR Ride
-
Turn trip notifications on or off under Account, or in your phone’s settings.
-
Change or remove your profile photo, and change your PIN, under Account.
Deleting your OMR Ride account
In OMR Ride, open Account, choose Delete my account and confirm. This immediately signs out every phone using your account and deletes your PIN, your profile photo, your notification inbox and your phones’ notification registrations. Your trip records are not deleted, because we must keep them for billing and legal reasons (see section 4). Deleting your app account does not cancel your rides or stop text messages; to stop texts, reply STOP.
In OMR Drive
Location sharing stops when you sign out. Driver accounts are managed by OMR; contact our office about your account or information.
Your rights
Depending on where you live, including in Virginia, you may have the right to ask whether we process your personal information, to access it, to correct it, to delete it, and to receive a copy. To make a request, email [email protected] or call (434) 833-1616. We will confirm your identity before acting on a request, and we will not treat you differently for exercising your rights. Some information, such as trip and billing records, we must keep by law. If we decline your request, you may appeal by emailing us; if your appeal is denied, you may contact your state attorney general.
We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of. Our website does not track you across other sites, so there is nothing for a Do-Not-Track signal to turn off.
7. HEALTH INFORMATION
Some trip information is health-related. We use it only to provide, coordinate and bill transportation, and we protect it as required by applicable law, including HIPAA where it applies.
8. CHILDREN
Our apps are not meant for children under 13 to use on their own. When we transport a minor, their information comes from the organization or guardian that arranges the ride and is handled as described in this policy.
9. CHANGES TO THIS POLICY
We will post any changes on this page with a new date. If a change is important, we may also tell you in our apps.
10. CONTACT US
If you have questions about this Privacy Policy or your information, contact us at: