Data Disclaimer & Privacy
Last updated: February 17, 2026
Ownership Data Disclaimer
ESBAP verifies ownership claims through publicly available sources, including:
- Press releases
- SEC filings (EDGAR)
- Company websites and disclosures
- BACB registry and LinkedIn profiles
ESBAP publishes ownership data only in its current phase. Ethics scoring (Phase 2) is not yet active. Every ownership claim links to its source document where available (e.g., SEC filings, press releases, company disclosures).
"Pending Verification" Label
Provider profiles may display a ⚠️ Pending Verification label next to the ownership type. This means:
- The ownership claim has not yet been independently verified by ESBAP.
- The data may have been sourced from directories, public registries, or other aggregate sources.
- Organizations are encouraged to claim their profile and submit documentation to verify their ownership status.
Correction Request Process
If you believe an entry is inaccurate, you can request a correction:
- Submit a request via email: corrections@esbap.org
- Initial review (24 hours): ESBAP verifies the claim against public sources.
- Compliance review (48 hours): Assessment of data accuracy and legal risk.
- Update or reject: If verified, the profile is updated. If rejected, the requester is notified with rationale.
What to include in your correction request
| Field | Required | Notes |
|---|---|---|
| Provider Name | Yes | |
| Current Ownership Claim | Yes | As shown on the profile |
| Corrected Ownership Claim | Yes | BCBA-Owned, PE-Backed, Nonprofit, etc. |
| Source URL | Yes | Press release, SEC filing, or company disclosure |
| Your Contact Email | Yes | For follow-up |
| Additional Comments | No |
Your Data Rights (GDPR/CCPA)
ESBAP complies with GDPR (EU) and CCPA (California) for users accessing our database.
Your rights include:
- Right to Access: Request a copy of your data.
- Right to Rectification: Correct inaccurate information.
- Right to Erasure: Request deletion of your data (subject to legal exceptions).
- Right to Opt-Out: California residents may opt out of data sales. ESBAP does not sell data.
How to exercise your rights
- Email: privacy@esbap.org
- Subject Line: "GDPR/CCPA Request: [Your Name]"
- Include: Your name, contact info, and specific request.
Response time: 30 days (extensions possible for complex requests).
Source Attribution
Where available, ESBAP attributes ownership data to its original source. Example:
All high-risk entries (PE-owned, significant revenue) undergo additional review before publication.