Consumer Health Data Privacy Policy
Effective October 26, 2026
This policy explains how SyncPill handles consumer health data under Washington's My Health My Data Act, Nevada's consumer health data law and similar U.S. state laws. It adds to our privacy policy, which covers everything else.
What consumer health data we collect
SyncPill is a medication checklist, so some of what it holds can reveal a health condition:
- medication names, notes and photos of pills or bottles;
- the times and days each medication is due;
- whether and when each dose was checked off, and taps on “Not yet, I'm eating later”;
- reminder settings (sound and how often reminders repeat);
- short messages a helper sends, such as “Time for your pills.”
We don't collect your location, contacts, health records from other apps, or advertising identifiers.
Where it comes from
From you, or from a helper or person you chose to link with in the app.
Why we collect and use it
Only to provide what you asked for: the checklist and reminders on the person's phone, the shared list, and alerts to helpers when a dose is missed. We also use it to answer your support requests. We don't use it for advertising or profiling, and we never sell it.
Who we share it with
- The people linked to the same checklist (the person and up to two helpers), because sharing the checklist is the service. The app asks for this consent separately, before anything is entered.
- Service providers that process it only on our instructions, under contract: Supabase (database, storage and sign-in, servers in Montréal, Canada; supabase.com), Apple (notifications and Sign in with Apple; apple.com). Our other providers never receive consumer health data: Resend (sign-in emails; resend.com), RevenueCat (subscription status; revenuecat.com) and Cloudflare (website and email forwarding; cloudflare.com).
We have no affiliates. We don't sell consumer health data, and we don't use geofencing around health care facilities.
Your rights
You can ask us to:
- confirm whether we collect, share or sell your consumer health data;
- give you a copy of it, and a list of every third party and affiliate that received it, with their contact details;
- delete it (we also tell our service providers to delete it);
- stop using it by withdrawing your consent. The app can't work without this data, so withdrawing consent ends the service and deletes the data.
You can delete everything yourself in the app. Helpers: Settings, then Delete my account and data. Using it on your own: Edit, then Delete my data. Copies in backups are gone within 7 days.
How to make a request
Email privacy@syncpill.com from the address you use with SyncPill (or tell us which checklist it is about, so we can check it's yours). Requests are free, up to twice a year. We answer within 45 days; if we need more time, up to 45 more days, we tell you why.
Appeals
If we decline your request, you can appeal by replying to our answer with the word “Appeal”. We answer appeals within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General (atg.wa.gov/file-complaint) or the Attorney General of your state.
How we protect it
Only the people who need it to run the service can reach it. It travels encrypted, is stored encrypted, and each phone can only read the checklist it is linked to.
Changes
If we change this policy, we update the date above. Before using consumer health data for anything new, we will ask for your consent in the app.
Contact
Studios Forge SD, 460, rue Saint-Jean, bureau 206, Montréal (Québec) H2Y 2S1, Canada. Privacy Officer: privacy@syncpill.com.