Privacy

Your wellness journey is personal

We know that there are some things you want to keep private, which is why we never share any of your information with third parties. We’ve designed this platform to make sure that you can access support and complete mental health Check-Ins, without sharing more than necessary.

For Students Grade 6 and above, identifiable information you provide will be kept confidential and secure and will not be shared with anyone unless you request that it is shared with your care team to help support your mental health journey and needs. Your data belongs to you; if you stop using this platform you can take your data with you. Note that parents and/or guardians of students under the age of 18 may request access to their child’s data at any time.

Prioritizing Privacy

Below are some ways we are prioritizing your privacy.

icon-check-mark

Automatic Detection

The platform maintains a Host-based intrusion Detection (HIDS) system that automatically detects potential intrusions and anomalous activities. We immediately investigate, respond to and resolve any issues that are discovered.

icon-check-mark

Database Backups

Database backups are automatically completed on a regular schedule. Databases are encrypted, backed up nightly, and stored in multiple locations.

icon-check-mark

Internal Policies

Comprehensive internal policies have been implemented to ensure privacy is maintained from an administrative perspective. All employees undergo extensive privacy and security training.

icon-check-mark

Password Protection

All password and security questions are cryptographically salted and hashed before storage. This means that they are heavily encrypted and are never stored in plain (viewable) text.

icon-check-mark

Access Monitoring

Network access is inspected in real time and permanently logged. Intrusion attempts are automatically identified and blocked , mitigating SSH attacks and other malicious behavior.

icon-check-mark

Secure Encryption

Data is encrypted in transit and at rest using AES encryption with 256-bit keys, as recommended by the US National Institute of Standards and Technology and Federal Information Processing Standard.

Frequently Asked Questions

Basecamp is designed to be used by students and parents or guardians in Frederick County. Students in grade 6 and above are able to access Basecamp on their own. For students in grade 5 and below, Basecamp is intended to only be accessed by parents or guardians. Parents or guardians have the option to explore Basecamp resources on their own or with their child, but only the parent or guardian is permitted to create an account.

No, Basecamp is available free of charge to all students and their parents or guardians. Funding for Basecamp was made available by the Maryland General Assembly under the Blueprint for Maryland’s Future (Ch. 36 of 2021).

All third-party resources on Basecamp undergo a thorough vetting process to ensure their safety, appropriateness, and effectiveness for students, parents and guardians. The vetting process is conducted by an independent expert consultant who has significant experience in the mental health sector, along with the appropriate credentials in health and well-being. The consultant evaluates several key aspects of each resource, including safety (to ensure no harm or risks are presented), engagement (ease of use and time required), author credibility (verification of credentials and reliability), and evidence basis (supported by credible evidence). Any resource that requires account creation must have an agreement in place to ensure that the vendor meets appropriate privacy, security, and safety standards. Additionally, links to external resources shared on Basecamp will not direct users to content on social media platforms. In addition to an initial review and screening prior to being made available on Basecamp, each resource is reviewed annually by an independent consultant to ensure ongoing adherence to the aforementioned standards.

Privacy and safety of users is a foundational component of the Basecamp platform. Greenspace, the technology provider that powers the platform, is SOC 2 Type II and HIPAA-compliant, exceeding local and federal privacy and security regulations. Greenspace supports hundreds of healthcare organizations, including school boards, private clinics, hospitals, and large health systems, and has passed extensive privacy and security reviews by reputable organizations such as Merakey, Sheppard Pratt, Catholic Charities, and UConn Health. Their privacy and security certifications and processes ensure that all personal information is safeguarded and exceeds privacy and security standards.

Basecamp is committed to keeping user data confidential. Identifiable data is not shared with any third parties, including FCPS, counselors or anyone else. For students in grade 6 and above, the information provided remains secure and is not shared with anyone unless the student requests for it to be shared. Users always retain ownership of their data, and if they decide to stop using the platform, they can take their data with them. Parents and guardians of students under 18 may request access to their child's data at any time - Basecamp will comply with all legal requirements, verify the identity of the requester, and then securely share the requested data.

No resource on Basecamp requires account sign-up or collects identifiable information unless it has been fully vetted and meets the more stringent privacy and security standards, as described in the vetting process. If a resource does require account creation and collects identifiable information of users, a formal legal agreement must be entered into between Greenspace and the third party vendor, in order to ensure user data security and privacy standards. Currently, Calm and Lucero are the only resources on Basecamp that fall into this category.

Yes, parents or guardians of students under 18 can access their child’s data by completing this form. Please include your child’s name, email address, as well as your full name. Basecamp will comply with all legal requirements, verify the identity of the requester, and then securely share the requested data.

Yes, parents or guardians have the option to opt their child out of Basecamp’s services. Simply complete this opt-out form, and Basecamp will ensure that the child’s email is blocked from the platform within 24-48 hours.

If a user decides to stop using Basecamp, their data remains under their control and can be exported or deleted upon request. The platform does not retain a user’s data after they have requested their data or account to be deleted, and complies with all relevant privacy regulations.

We value feedback from our users. If you have a suggestion for a new resource or concerns about an existing one, you can fill out our Basecamp Feedback Form. We review all submissions carefully to ensure that we continue providing high-quality, effective resources for our users.