Privacy Policy | Medcorder

Last updated: October 17, 2026

Medcorder, Inc. ("Medcorder," "we," "us," or "our") operates the Medcorder mobile application and related services. Medcorder is a consumer health app designed for patients, their family members, and caregivers in the United States. The Service is not intended for use by healthcare providers acting in their professional capacity.

This Privacy Policy describes how we collect, use, and share information when you use our services. Our Consumer Health Data Privacy Policy gives the additional detail that Washington and Nevada law require for health data.

Information We Collect

Information you provide

Account information: When you create an account, we collect your phone number for authentication purposes.
Profile information: You may optionally provide your name, email address, and profile photo.
Recordings, transcripts, and summaries: When you record a medical appointment, or a phone call you place to a care provider through Medcorder, the audio, its automatic transcript, and a summary generated from it are stored in our cloud infrastructure.
Messages and notes: Text messages and notes you create within appointment chat rooms.
Doctor information: When you search for or add a doctor to an appointment, we store the doctor's name and practice information.

Information collected automatically

Device information: Device type, operating system version, and unique device identifiers for crash reporting and analytics.
Usage information: How you interact with the app, including feature usage and session duration.
Location: With your permission, approximate location for the nearby doctor search feature. Location data is not stored on our servers.

How We Use Your Information

To provide and maintain the Medcorder service, including recording, transcription, summaries, phone calls, and sharing features
To authenticate your identity and secure your account
To enable you to share recordings and notes with family members and caregivers you invite
To create de-identified data for healthcare research, analytics, and commercial licensing (see De-Identified Data below)
To improve the app through usage analytics and crash reports
To provide customer support
To send service-related notifications (e.g., when someone shares a recording with you)

How We Share Your Information

We do not sell personally identifiable information. The only data we license is de-identified: transcripts, and audio from which identifying details have been removed but in which the speakers' own voices remain (see De-Identified Data below). You can opt out of having your recordings included at any time. Apart from that de-identified data, we share information only in the following circumstances:

With people you choose: When you invite family members or caregivers to an appointment room, they can access the recordings, transcripts, summaries, and notes in that room.
Service providers: We use providers for cloud hosting, data storage, and sign-in; speech-to-text transcription; AI-generated summaries; connecting and recording phone calls you place through Medcorder; and analytics and crash reporting. Each receives only the data it needs to do its job for us, and processes it on our behalf under contract.
Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

De-Identified Data

Medcorder creates de-identified versions of recordings and transcripts and licenses them, along with findings drawn from them, for healthcare research and related commercial activities. This section explains what that means and how it works.

What we remove

We remove names, phone numbers, email addresses, locations and addresses, dates of birth, and identifying numbers (such as Social Security, health insurance, driver's license, passport, account, and payment card numbers) from both the transcript and the audio. In the audio, those details are replaced with silence.

What remains

The clinical conversation: discussion of medical topics, treatments, and medications, along with other dates mentioned in it, such as appointment dates. De-identified audio also contains the remaining speech, in the speakers' own voices.

Who receives it

De-identified data may be licensed to research institutions, healthcare analytics firms, pharmaceutical companies, and technology companies, and to data marketplaces that license it to those kinds of buyers, for purposes including medical research, drug safety analysis, healthcare AI development, and market analytics.

Safeguards

We protect de-identified data through the following commitments:

Medcorder takes reasonable measures to prevent de-identified data from being associated with any individual.
Medcorder processes de-identified data only in de-identified form and does not attempt to re-identify it.
Every recipient of de-identified data, including the buyers of any data marketplace, is contractually required to keep it de-identified and is prohibited from attempting to re-identify it or contact any individual.

Your choice

You may opt out of having your recordings included in future de-identified datasets by contacting us at [email protected]. Opting out does not affect your use of the Medcorder app. California residents may treat this opt-out as a request to opt out of the sale of personal information, and we will honor it as one.

Data Security

We protect your information through the following measures:

All data is encrypted in transit (TLS) and at rest.
Access to identified data is restricted to a small number of Medcorder personnel and to the service providers described above.
No identified data is shared with third parties, except as described in How We Share Your Information above.
Phone-number-based authentication with verification for user accounts.

Data Retention

Your recordings, transcripts, and account data are retained as long as you maintain your Medcorder account. You can delete individual recordings at any time. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

Deletion of your personal data does not affect de-identified data that has already been created or licensed.

Children's Privacy

Medcorder is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can delete it.

Your Privacy Rights

Regardless of where you live, you may contact us at [email protected] to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information
Opt out of de-identified data use

Include the phone number on your Medcorder account. We will confirm the request through that phone number before acting on it, and we respond within 45 days. If we decline a request, you can appeal by emailing [email protected] with "Appeal" in the subject line.

California residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to know what personal information we collect, to request its correction or deletion, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. We do not sell personally identifiable information, and we do not share personal information for cross-context behavioral advertising. The only data we license is de-identified data, as described above. To opt out of having your recordings included in it, which we treat as a request to opt out of sale, email [email protected].

Washington and Nevada residents

Our Consumer Health Data Privacy Policy describes the consumer health data we collect and share and how to exercise your rights under Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (SB 370).

Other states

If your state provides additional privacy rights, please contact us and we will work with you to honor them.

Breach Notification

In the event of a breach affecting your identifiable health information, we will notify affected users promptly in accordance with applicable federal and state law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by other means. Your continued use of Medcorder after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, contact us at:

Medcorder, Inc.
Redwood City, CA
[email protected]