This page is maintained by NorthStar Lab Services to answer common security and privacy questions about our services. It describes the controls and practices we have implemented. It is not an independent certification, audit report, or legal guarantee.
Access & Authentication
- Attorney and staff portals require email-verified accounts with role-based access.
- Passwords are hashed and checked against known-breach databases at signup.
- Multi-factor authentication is supported for staff and administrator accounts.
- Session tokens are short-lived and refreshed automatically.
Data Collection & Use
We collect only the information needed to schedule, perform, document, and report testing services. This includes contact details, identity verification at collection, case references, and payment information processed by our third-party payment provider. See our Privacy Policy for the complete description.
Platform & Hosting Context
Our website and case-management application are hosted on a managed cloud platform that provides automatic security patches, encrypted storage, and network isolation. Underlying infrastructure security is the responsibility of the platform provider; application-level access controls, data handling, and operational procedures are the responsibility of NorthStar Lab Services.
Cookies & Analytics
We use strictly necessary cookies to operate the site and Google Analytics, with consent, to understand aggregate traffic. We do not use advertising cookies or sell browsing data. See our Cookie Policy for details and opt-out instructions.
Retention & Deletion
Chain-of-custody documentation and test reports are retained in accordance with our partner laboratory and Michigan record-retention requirements — generally a minimum of two years, and longer where legal or contractual obligations apply. Non-required records may be deleted on request.
Security & Privacy Contact
To report a security concern, request a privacy change, or ask a compliance question, contact us:
- Email: Hello@NorthStarLabServices.com
- Phone / Text: (989) 262-0906
Shared Responsibility
Platform-level security (hosting, encryption at rest, network isolation) is provided by our managed cloud provider. Application access controls, staff training, identity verification at collection, result delivery decisions, and record-retention practices are managed by NorthStar Lab Services. Clients are responsible for keeping their portal credentials secure and notifying us promptly of suspected unauthorized access.