Sync.MD
SIGN IN

SYNC.MD PRIVACY NOTICE

What Information Does SyncMD Collect?

SyncMD collects only the information necessary to provide the services you request.

This may include:

Personal Information

  • Name
  • Date of birth
  • Address
  • Email address
  • Phone number

Health Information

  • Medical records and reports
  • Lab results
  • Insurance and Medicare-related documents
  • Forms and authorizations
  • Any health information you upload or authorize to be shared

Technical Information

  • Device and browser type
  • IP address
  • Basic usage data required for secure system operation

Sync.MD does not collect information for advertising purposes.

How Does SyncMD Use Your Information?

We use your information only to:

  • Provide access to your Personal Health Record
  • Securely store and exchange your records
  • Process record requests you initiate
  • Verify your identity
  • Maintain system security
  • Comply with legal requirements

SyncMD does not use your information for:

  • Marketing emails
  • Targeted advertising
  • Data sales
  • Behavioral profiling
  • Automated decision-making that affects your rights or healthcare

Does SyncMD Sell My Information?

No.

SyncMD does not sell, rent, trade, or monetize your personal or health information.

We do not engage in targeted advertising or cross-context behavioral advertising.

Who Can See My Information?

You control who has access to your records.

SyncMD shares your information only:

  • With organizations or individuals you authorize
  • With trusted service providers that help operate our platform
  • When required by law
  • In connection with a business transfer (with advance notice and user options)

You may revoke sharing permissions at any time.

How Long Is My Information Stored?

SyncMD operates as a persistent Personal Health Record platform.

Your information remains in your account until:

  • You delete specific records, or
  • You request account deletion

A SyncMD account may be considered “Dormant” if the account holder has not logged into or otherwise accessed the SyncMD Services for an extended period of time. If an account remains inactive, SyncMD may classify the account as Dormant. In accordance with SyncMD’s data retention practices described in the Privacy Policy, SyncMD generally retains Dormant accounts and associated information for up to ten (10) years from the date of the user’s last recorded activity. After this period of inactivity, SyncMD may deactivate, archive, or delete the account and associated information in accordance with its records management and data retention policies, unless a longer retention period is required or permitted by applicable law. If you request account deletion, it is processed within 24–48 hours.

Can I Download or Delete My Information?

Yes.

You may:

  • Download your records
  • Modify sharing settings
  • Revoke access
  • Request correction or annotation
  • Request account deletion

If you withdraw consent for sharing, future disclosures will stop. Organizations that already received your information may retain copies in accordance with their own legal obligations.

How Does SyncMD Protect My Information?

SyncMD uses administrative, technical, and physical safeguards to protect your information.

Security measures include:

  • Encryption of data in transit and at rest
  • Secure authentication controls
  • SMART on FHIR OAuth 2.0 authorization framework
  • Identity assurance practices aligned with industry standards
  • Access controls and audit logging

If a confirmed data breach occurs, SyncMD will notify affected individuals without unreasonable delay and no later than 30 days after confirmation, unless a shorter timeframe is required by law.

Does SyncMD Use Artificial Intelligence or Automated Decisions?

No.

Sync.MD does not use artificial intelligence, profiling, or automated decision-making systems that affect your legal rights, healthcare treatment, or access to services.

Does SyncMD Use My Data for Research?

SyncMD may create de-identified data by removing information that identifies you.

De-identified data:

  • Cannot reasonably identify you
  • Is used only internally
  • Is not sold
  • Is not shared for commercial purposes

SyncMD prohibits re-identification of de-identified data.

What About Genetic or Family Information?

Some health information, such as genetic test results or family medical history, may indirectly reveal information about relatives. You should consider these implications before sharing such information.

What Happens If SyncMD Is Sold or Merges?

If SyncMD is sold, merged, or transferred:

  • You will receive advance notice
  • You will have the opportunity to download your data
  • You may request deletion of your account before the transfer

Who Oversees Privacy and Security?

SyncMD has designated a Compliance Program Coordinator responsible for privacy and security oversight.

If you have questions or concerns, contact:

help@syncmd.com

You may also submit complaints to:

  • The Federal Trade Commission (FTC)
  • Your State Attorney General

Will I Be Notified of Privacy Changes?

Yes.

If SyncMD makes material changes to how your information is handled:

  • You will receive notice
  • You will be required to affirmatively accept the updated terms before continuing to use the app

Where Can I Learn More?

For full details, please review: