Privacy policy

What we collect

What you give us at sign-up (name, date of birth, contact details, address), a copy of your photo ID, your signed authorization, and the medical records your providers send us at your request.

How we use it

Only to request, collect, organize and show you your own records, and to send them where you tell us. We don't sell your information or use it for advertising.

Who sees it

You, the providers you ask us to contact, and people you share a link with. A small staff team, under confidentiality duties, when needed to process your requests; every view is logged and you can see the log under Account. Service providers that carry our faxes, mail and hosting handle your information only to do that work for us.

Security

Files are encrypted at rest and in transit; sign-in uses one-time codes or links, or a password with optional two-step login; access is logged.

How long we keep it

For as long as your account is open. When you close your account or ask us to delete your data, we delete it, except what the law requires us to keep.

Your choices

You can revoke your authorization in writing at any time, turn off share links, and ask us to export or delete your data.

Breach notice

If your information is ever exposed, we will tell you as the law requires (for example the FTC Health Breach Notification Rule).

Changes and contact

If we change this policy we will post the new version here with its date, and tell you before a material change applies to you. Questions go to Disrupt Ventures LLC from your account.