Your health data, protected at every step

Your health information is encrypted before it reaches the database, and in transit everywhere.

• Field-level AES-256-GCM encryption for health, mental-health and personal data, bound to each column so values cannot be swapped.
• Envelope encryption for every uploaded file (prescriptions, reports, photos) with a unique key per file.
• TLS for every connection; HSTS and secure, HttpOnly, SameSite cookies.
• Keys can be rotated without downtime; searchable fields use keyed hashes instead of plain text.

People see only what they need — and doctors see your records only when you allow it.

• Role-based permissions with ownership checks on every request (minimum necessary access).
• Doctors read records only during an active appointment or under a consent you grant and can revoke at any time.
• Emergency "break-glass" access is time-limited, justified, reported to you and reviewed by an administrator.
• Therapy notes stay with your therapist; therapists see only the name you choose.

Strong defaults protect every account, with extra protection for providers and administrators.

• Multi-factor authentication (authenticator app) with recovery codes; required for providers and staff.
• Breached and common passwords are rejected; repeated failed sign-ins lock the account temporarily.
• Automatic sign-out after inactivity; you can see and end your active sessions.
• Refresh tokens rotate on every use, and reuse is detected and blocked.

Every access to health information is recorded, and you can see who opened your records.

• Append-only audit log protected by a cryptographic hash chain, so tampering is detectable.
• "Who accessed my records" shows every view of your data, including by family-member accounts you manage.
• Automated detection of suspicious sign-ins, mass exports and unusual record access alerts our security team.
• Incident response plan with 72-hour regulator notification steps.

Built against the OWASP Top 10 and the OWASP Application Security Verification Standard.

• Strict, per-request Content Security Policy with no third-party trackers or analytics scripts.
• Every input validated against a schema; unknown fields are rejected.
• Rate limits on sign-in, OTP, SOS, uploads, exports and payments; CSRF protection on every change.
• Uploads are type-checked by content, stripped of location metadata and scanned for malware.

You stay in control of your data in the Privacy Center.

• Download your data (JSON, CSV or the FHIR R4 healthcare standard), correct it, restrict or object to processing.
• Delete your account with a grace period; legally required records are kept only for the statutory period.
• Granular, revocable consents with a full history; cookie choices with equal "Accept" and "Reject" options.
• Payment providers never receive health details — only a generic reference like "Order #8F3K".

Each deployment keeps its data in one region, and nothing is kept longer than needed.

• Separate regional deployments keep data in the region you signed up in.
• Live locations of couriers and ambulances are deleted 24 hours after a trip.
• Retention periods for every data type are enforced by a scheduled purge job.
• Analytics use de-identified totals only; small groups are hidden so no one can be singled out.

Everyone who treats you or handles your medicines is checked before they can go live.

• Doctor and therapist registrations, pharmacy licenses, lab accreditations and hospital registrations are reviewed.
• Prescriptions are digitally signed and carry a QR code pharmacies can verify.
• Delivery partners see your address and a package count — never your medicines.
• Payouts to providers go through regulated payment partners.

Designed so that a busy day or a failing component does not lose your data.

• Transactional database with constraints that make double bookings and overselling impossible.
• Background jobs and webhooks retry automatically with backoff.
• Payment webhooks are processed exactly once.
• OmniCare never replaces emergency services — the emergency number is always one tap away.