Consumer Health Data Privacy Policy

Effective: October 17, 2026

This Consumer Health Data Privacy Policy explains how Medcorder, Inc. ("Medcorder," "we," "us," or "our") collects, uses, and shares consumer health data, as required by Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (SB 370). It applies to the Medcorder mobile apps, web app, and website. Our general Privacy Policy covers our other practices.

Consumer health data we collect

Recordings of medical conversations: audio you record of appointments and of phone calls you place to care providers through Medcorder.
Transcripts and summaries: the automatic transcripts of those recordings and the summaries generated from them.
Notes and messages: text you and the people you invite write in an appointment room.
Appointment and care provider details: the doctors and practices you search for or add, and the appointments you create.
Approximate location: with your permission, used only to find nearby doctors. It is not stored on our servers.
App usage and device information: because Medcorder is a health app, information about how you use it can indicate that you are seeking health care.

Why we collect it and how we use it

To record, transcribe, summarize, and store your medical conversations, and to show them to you.
To let you share recordings, transcripts, and notes with the family members and caregivers you invite.
To connect phone calls you place to care providers through Medcorder.
To send service notifications, such as when someone shares a recording with you.
To secure your account, prevent abuse, fix problems, and provide support.
To create de-identified data, from which identifying information has been removed, for healthcare research, analytics, and AI development (see De-identified data). You can opt out of this use at any time (see below).

Sources of consumer health data

You, when you record, type, or add information in the app.
People you invite to an appointment room, when they add recordings or notes there.
The people on a call or in an appointment you record, whose voices are captured in the recording.
Your device, for approximate location (with your permission) and usage information.

Consumer health data we share

Apart from the de-identified data described below, consumer health data leaves Medcorder only in these cases:

At your direction: the recordings, transcripts, summaries, and notes in an appointment room are visible to the people you invite to that room.
To our service providers: only the data each one needs to do its job for us (see the list below).
When the law requires it: any data covered by a law, legal process, or governmental request.

Who receives consumer health data

People you choose: family members and caregivers you invite to an appointment room.
Cloud hosting and storage providers that run our servers, database, and sign-in.
Speech-to-text providers that transcribe recordings.
AI providers that generate summaries of transcripts.
Telephone service providers that connect and record calls you place through Medcorder.
Analytics and crash-reporting providers that receive app usage and device information.
Government authorities or other parties when the law, legal process, or a governmental request requires it.

Our service providers process data only on our behalf and under contract. Medcorder has no affiliates with which it shares consumer health data.

De-identified data

We license de-identified recordings and transcripts, and findings drawn from them, to research institutions, healthcare analytics firms, pharmaceutical companies, and technology companies, and to data marketplaces that license it to those kinds of buyers. Before anything is licensed, names, phone numbers, email addresses, locations and addresses, dates of birth, and identifying numbers are removed from both the audio and the text. De-identified audio still contains the remaining speech in the speakers' own voices.

We take reasonable measures to prevent de-identified data from being linked to you. We process it only in de-identified form and never try to re-identify it, and we contractually require every recipient to do the same. You can opt out of having your recordings included (see below).

Your rights and how to use them

You have the right to:

Confirm whether we collect, share, or sell your consumer health data, and get a copy of it.
Get a list of the third parties and affiliates we have shared it with, with a way to contact each one.
Withdraw your consent to our collection and sharing of your consumer health data.
Have your consumer health data deleted.
Opt out of having your recordings included in de-identified datasets.

To make a request, email [email protected] from any address and include the phone number on your Medcorder account. We will confirm the request through that phone number before acting on it. You can also delete individual recordings, or your whole account, in the app.

We respond within 45 days. If we need more time, we will tell you why within those 45 days and finish within 45 more. Requests are free up to twice a year.

Appeals

If we decline your request, you can appeal by emailing [email protected] with "Appeal" in the subject line. We will tell you in writing what we did and why within 45 days. If we deny your appeal, you can file a complaint with the Washington State Attorney General.

Changes to this policy

We will post any change to this policy on this page with a new effective date. Before we collect, use, or share consumer health data in a way this policy does not describe, we will tell you in the app and ask for your consent.

Contact

Medcorder, Inc.
Redwood City, CA
[email protected]