Registered Nurse

How APM Steam helped Atrium Health Cabarrus unlock hidden savings. APM Steam's partnership with Atrium Health Cabarrus shows how a systemwide steam assessment can turn recurring condensate issues into a clear path to efficiency gains, reduced risk, and long-term savings. Turning hidden losses into opportunity At Atrium Health Cabarrus, steam quietly supports essential hospital functions including heating, humidification, sterilization, hot water, and foodservice. Over time, campus expansions and boiler plant changes had shifted how the system operated, creating mismatches between older configurations and current conditions. Even with a capable facilities team and periodic steam trap surveys, some inefficiencies and component sizing issues remained out of sight, hidden above ceilings, behind walls, and in mechanical rooms. Key challenges included faulty steam traps that allowed steam into condensate return tanks, pump seals burning out alongside pressure issues within the tanks, and instantaneous water heaters experiencing high failure rates in their steam control valves. These symptoms pointed to a broader system health issue that couldn't be solved by treating each failure as an isolated event. A systemwide steam assessment APM Steam approached the project by looking beyond single components to evaluate the overall health of the steam distribution system. Technicians assessed steam traps, heat exchangers, pressure reducing valves (PRVs), condensate return units, and insulation heat loss to understand where energy and water were being lost and where repairs would have the greatest impact. In the process, they uncovered missing or improperly installed components, audible cavitation, pumps operating outside ideal conditions, and failed units no longer supporting efficient condensate recovery. The assessment also revealed incorrectly sized PRV stations for the current boiler plant configuration, operating pressures that no longer matched today's campus needs, and opportunities to reduce energy waste by improving condensate recovery. Rather than delivering a dense engineering report, APM Steam translated these findings into an actionable plan that connected technical observations to operational and financial outcomes. Bundled repairs built around performance Instead of addressing each issue as a standalone task, APM Steam developed a bundled scope of work designed around system performance. The proposed package included: Steam trap repairs. Custom insulation jackets and trap insulation jackets. Heat exchanger cleanings and isolation valve replacements. PRV repairs and condensate return unit improvements. An electric condensate return unit to overcome pressure and elevation limitations. This bundled model emphasized a key principle of steam system management: the best repair is often not the most isolated repair. By treating these components as interconnected, APM Steam helped Atrium Health Cabarrus move from reactive fixes toward a more strategic, performance-based approach. Projected savings and long-term value According to the executive repair summary, the proposed scope of work projected annual energy savings of approximately $144,949 and a reduction of 79,177 therms across the steam system. About $10,300 in annual savings and 6,600 therms were tied directly to condensate return improvements, highlighting the value of recovering treated water and heat energy instead of relying on colder, chemically treated makeup water. $48,869 annually from steam trap repairs. $28,936 from heat exchanger cleanings. $22,778 from custom insulation jackets. Throughout the assessment, APM Steam shared observations with the facilities team, explaining what technicians were looking for and why certain findings mattered, which created a valuable learning opportunity and supported better long-term maintenance planning. As Atrium Health Facilities Operations Manager Tom Grosso noted, the team "learned a lot of things from this assessment that we didn't know we didn't know," underscoring the value of a partner who can help hospitals understand and improve their steam systems as interconnected wholes.

Atrium Health settles $1.8 million patient privacy lawsuit. The rapid expansion of telehealth services and digital patient engagement tools has forced a critical reckoning regarding the security of electronic protected health information, highlighting the profound vulnerability of personal data in an era where healthcare providers increasingly rely on third-party analytical software to optimize their web presence. The settlement involving Atrium Health highlights a systemic issue where the drive for user-friendly digital interfaces has outpaced the implementation of robust privacy safeguards. When healthcare systems integrate third-party tracking tools like the Meta Pixel into patient portals, they often unknowingly create a conduit for sensitive data to flow to advertisers. This $1.8 million resolution stems from allegations that such practices violated privacy statutes by exposing clinical interactions to unauthorized entities. In 2026, hospital administrators find that standard web analytics are unsuitable for clinical environments. Breach context. Part 1: tracking code. The technical core of the dispute centered on the deployment of tracking code designed to monitor how visitors interacted with hospital websites and internal patient portals. These snippets of code, provided by major technology corporations, were intended to help Atrium Health understand user behavior to improve the functionality of their digital services. However, because these scripts operated on pages where patients logged in to view test results or schedule appointments, they allegedly captured more than just navigation data. Information such as names and specific medical conditions was potentially transmitted to external servers without explicit patient consent. This data leakage represents a fundamental failure in the digital perimeter, where tools built for the commercial internet were applied to the highly regulated world of medical records. Consequently, the reliance on these automated scripts created a massive liability that was not identified until privacy advocates began. Part 2: legal impacts. Beyond the technical aspects, the legal ramifications of the settlement reflect a heightened scrutiny of how healthcare organizations manage their digital supply chains. The class-action lawsuit represented individuals who claimed their trust was betrayed when their private health inquiries were treated as marketable consumer data. By agreeing to pay $1.8 million, Atrium Health aimed to resolve these claims while avoiding the prolonged costs and reputational damage of an extended courtroom battle. This figure includes legal fees and direct payments to affected individuals, but the administrative costs of auditing internal systems will likely exceed the initial penalty. The case serves as a warning that ignorance of how third-party software handles data is not a valid legal defense under HIPAA interpretations. Legal departments are now being integrated with IT teams to ensure that every line of code deployed on a patient-facing site undergoes a rigorous privacy impact assessment first. Safety standards. Part 3: data security. Addressing these vulnerabilities requires a shift toward more controlled technological architectures, such as server-side tracking, which allows hospitals to filter data before it ever reaches a third party. Unlike traditional client-side pixels that execute in the user's browser and send data directly to external servers, server-side implementations act as a secure gateway. This middle layer gives healthcare organizations the power to scrub personally identifiable information and clinical details, ensuring that only anonymized data is shared for analytical purposes. Many institutions in 2026 have already begun migrating to HIPAA-compliant analytics platforms that offer dedicated environments for sensitive data. These platforms prioritize data residency and encryption, allowing for detailed user insights without compromising the legal requirements of medical confidentiality. Investing in these specialized tools is becoming a standard operational cost for any health system today. Part 4: final actions. Industry leaders recognized that the Atrium Health settlement provided a clear roadmap for proactive data governance in the clinical sector. Organizations moved away from the indiscriminate use of social media tracking tools and adopted comprehensive digital audits that scrutinized every external connection made by their web properties. They implemented stricter vendor management protocols, requiring third-party providers to sign business associate agreements that specifically addressed the handling of metadata. This shift in strategy prioritized the long-term integrity of the patient-provider relationship over the short-term gains of aggressive digital marketing campaigns. Internal training programs were overhauled to ensure that web development teams fully understood the legal nuances of health data privacy. By centering patient consent in the design phase of all digital initiatives, healthcare providers successfully reduced their legal exposure and rebuilt public confidence.