We do not sell your health data
Not to advertisers, not to insurers, not to data brokers, not in aggregate, not ever. Our revenue comes from services people choose to pay for.
Privacy & security
Health data is the most personal data there is. We treat it that way.
Plain-English answers to the questions that actually matter: what we collect, who can see it, how long we keep it, and how to get rid of it. No legal fog.
Export everything we holdAny time
Delete your account and dataAny time
Choose what syncs, per metricGranular
Sharing links expireYou set it
Sell your health dataNever
Principles
Four commitments, stated plainly
These aren’t aspirations. They’re the constraints our engineering works within.
We collect as little as possible
If a feature works without a piece of data, we don’t ask for it. Location is used to find pharmacies and is not stored as a history.
Encrypted in transit and at rest
We use encryption in transit and encryption at rest for supported production systems, together with access controls and audit logging. Specific controls can vary by data type, system and service provider.
You are in control
Request access, export, correction or deletion of eligible personal data, subject to identity verification and legal or clinical record-retention requirements.
Dr. Rivera · medications onlyExpires 24h
Pharmacy · one OTC sheetExpires 1h
Revoke any linkInstant
Full access logVisible to you
Sharing
Nothing leaves your account by accident
Every share is deliberate, scoped and time-limited. You choose which items go out, who receives them and when access ends — and you can see exactly who opened what.
- Item-level sharing rather than all-or-nothing access to your record.
- Every link carries an expiry, and you can revoke it before that.
- A visible access log showing who opened which item, and when.
- Clinicians in a consultation only receive what you approve beforehand.
How AI uses your information
The part most policies bury
Your conversation powers your answer
What you type or say is processed to generate guidance for you, in that session. That is its primary and default use.
Training is opt-in, not opt-out
If the product truly has an optional data-contribution/model-improvement setting, describe its exact scope and provider behavior here. If no such setting exists, replace with: "We do not permit our contracted AI service providers to use your health content to train their general models, subject to our provider agreements and Privacy Policy."
Human review is limited and logged
Authorized personnel may review limited information for safety, quality, security or support purposes as described in the Privacy Policy. Access should be limited, logged and de-identified where feasible.
Retention has a limit
Records are kept while your account is active and deleted on request. Backups roll off within 90 days.
Encryption & Zero-Knowledge Protection
How encryption and zero-knowledge protection differ
Encryption at rest
Protects stored data using encryption managed by the service or its infrastructure. “Zero-knowledge” protection is stronger and applies only when OnlineCare cannot obtain the keys needed to decrypt protected content.
Where HIPAA does and doesn't apply
An honest answer to a question most apps dodge
Consumer health apps are usually not HIPAA-covered. Here is exactly where the line sits for us.
HIPAA applies
To records created during a consultation with a licensed clinician. For HIPAA-covered clinical services, the healthcare provider or medical group responsible for the consultation is the covered entity. OnlineCare acts as a business associate when it creates, receives, maintains or transmits PHI on behalf of that covered entity under a written Business Associate Agreement.
HIPAA generally does not apply
To AI conversations, symptom checks, wallet items you upload yourself and wearable data. We protect those under our Privacy Policy, our Privacy Policy and applicable consumer-health privacy laws, including state laws and the FTC Health Breach Notification Rule where applicable. These laws are different from HIPAA and provide different rights and obligations.
Your rights
What you can ask for, and how long it takes
Access & export
Get a machine-readable copy of everything associated with your account, usually within 30 days and often much sooner.
Correction
Fix anything inaccurate in your profile or records directly in the app, or ask us to do it.
Deletion
Delete your account and associated data. We confirm when it’s done and tell you what, if anything, we’re legally required to retain.
Object & restrict
Withdraw consent for optional processing at any time without losing access to core features.
Found a security issue? Email security@onlinecare.com
with the details. We investigate every report, respond directly to the reporter, and never pursue
legal action against good-faith security research.
Questions we haven’t answered here?
Write to our privacy team directly. A person reads it, and you’ll get a real answer rather than a link back to the policy.
privacy@onlinecare.com · Privacy requests are handled according to applicable law and our published process
