Consumer health data privacy policy
Last updated: 14 September 2026
This is a separate policy, deliberately. Washington’s My Health My Data Act (RCW 19.373.020) and Nevada SB 370 both require a consumer health data privacy policy that is distinct from a general privacy policy and linked separately from the homepage.
MyMedi’s general privacy policy covers everything that is not health data.
1. What consumer health data MyMedi collects
Everything below is provided by you. MyMedi does not buy health data, does not infer it from your browsing, and does not receive it from data brokers.
| Category | Examples | Where it comes from |
|---|---|---|
| Documents you add | Scans and photographs of lab reports, imaging reports, discharge notes, letters | You scan, upload, paste, or type them |
| Text you write | Titles, notes, and free-text records | You type them |
| Content you share in | Links, articles, and posts you send to MyMedi from other apps | The iOS share sheet, at your initiative |
| Measurements extracted from your documents | Test names, values, units, and the reference ranges printed on your reports | Derived automatically from documents you added |
| Machine representations of your text | Numeric embeddings used to find relevant passages when you ask a question | Derived automatically from documents you added |
| Account data | Email address, or the private relay address Apple gives us if you use Sign in with Apple | You, at sign-up |
| Consent records | Which disclosures you agreed to, the exact wording shown, the version, and when | Recorded when you agree |
MyMedi does not collect precise geolocation. There is no location permission in the app. This matters because MHMD treats location near a health facility as health data in its own right.
2. How it is used
- To store your records and show them back to you.
- To extract the measurements printed on your reports so you can see one test over time.
- To find the passages relevant to a question you ask, and to answer it from those passages.
- To produce a plain-language summary that restates what a document says.
That is the complete list. Your health data is not used to train any model, is not used for advertising, and is not used to build a profile of you.
3. Who it is shared with
MyMedi does not sell consumer health data. Under MHMD a “sale” requires separate written authorization, and MyMedi does not ask for one because it does not sell.
Health data reaches exactly two processors, both under contract, both barred from using it for their own purposes:
Supabase — hosts the database and file storage. Your records live in Postgres rows scoped to your account by row-level security, and scans live in a private storage bucket reachable only through short-lived signed links.
OpenAI — reads document text and images to perform text recognition, extraction, and summarisation, and to answer your questions.
-
Requests are sent with
store: false, so OpenAI does not keep the response as a stored object in their product. MyMedi does not use OpenAI’s Files or Vector Stores products. Your documents and their embeddings stay in MyMedi’s own database. - OpenAI does not train on data submitted through its API.
- OpenAI may still retain request content in abuse-monitoring logs for up to about 30 days. Zero Data Retention is not enabled on this account.
No analytics or advertising SDK ever receives health data. None is present in the app.
MyMedi will disclose health data to law enforcement only under a valid, specific legal order, and will tell you unless legally forbidden from doing so.
4. How long it is kept
Your data is kept until you delete it. There is no separate retention clock: a record you delete is deleted, and an account you delete takes everything with it.
Backups are the one exception, and the honest position is that deletion from point-in-time recovery snapshots happens as those snapshots age out of the recovery window rather than instantly.
5. Your rights
You can, at any time:
- See what MyMedi holds about you, including the categories collected and the list of processors it has been shared with.
- Get a copy of your records, summaries, and extracted measurements in a machine-readable format.
- Delete any record, or your entire account. Deleting your account removes every document, scan, summary, measurement, and embedding, and instructs every processor to do the same.
- Withdraw a consent, including consent to send documents to OpenAI. Withdrawing that one means new documents will not be summarised or made searchable; what has already been stored stays until you delete it.
MyMedi answers within 45 days, and will tell you if it needs the single extension the law allows. If a request is refused you will be told why in writing, and you can appeal — the appeal is reviewed by a different person than the one who refused it.
To exercise any of these, open Settings → Your rights in the app, or email the address in section 8.
Washington residents may also complain to the Washington State Attorney General, and MHMD gives you a private right of action under the Consumer Protection Act.
6. Where data is processed
Data is processed in the United States.
7. Security
- Every table is protected by row-level security, so the database itself refuses to return another person’s rows.
- Scans are in a private bucket; access is only ever through signed links that expire in minutes.
- Your session token is encrypted with a key held in the device Keychain.
- Health data is never written to iCloud, and MyMedi does not use CloudKit.
- The OpenAI key exists only on the server. It is not in the app, so it cannot be extracted from it.
8. Contact and changes
Questions, requests, and appeals: privacy@getmymedi.app
If this policy changes in a way that affects how your health data is used, MyMedi will ask for your consent again rather than relying on the consent you already gave. That is why every consent record stores its version and the exact text you saw.