Privacy policy
MedHub is a service that lets you keep your and your family's medical reports in one place using WhatsApp. It is operated by Shepardtri Solutions Private Limited ("we", "us"), which decides how your data is used and is responsible for it under India's Digital Personal Data Protection Act, 2023.
What we collect
- Your WhatsApp phone number and the name on your WhatsApp profile.
- The full names and relationships of the family members you register.
- Your consent reply and the time you gave it.
- The reports, prescriptions, scans and images you send, and the information we read from them: patient name, report date, test values and medicines.
- Records of logins to your health record, the reports opened, and the reports you share with others, including the recipient's name and number.
Why we use it
- To create your account and keep each family member's records separate.
- To file each report under the right person and show it in your health record.
- To send you messages you ask for: confirmations, login codes, links to your record.
- To send a report to someone, only when you choose to share it.
- To keep the service secure and to answer your requests.
We do not sell your data, use it for advertising, or share it with insurers or employers.
Consent and family members
Nothing is stored until you reply YES to the consent message. When you add a family member, you confirm that you have their permission, or that you are the parent or legal guardian of a child under 18 or of a person who cannot consent. You can withdraw consent at any time (see below).
Who else handles your data
- WhatsApp (Meta) carries the messages and files between you and MedHub, under WhatsApp's own terms and privacy policy.
- Our hosting provider runs the servers that store your records, under contract and without access for its own purposes.
- People you share a report with receive that report only.
- Authorities, only when Indian law requires it.
How we protect it
- Your health record opens only with a one-time code sent to your own WhatsApp number, or a single-use link sent there.
- Connections are encrypted (HTTPS). Login codes are stored only in scrambled (hashed) form.
- Each file is shown only to the account it belongs to, and every login and file view is logged.
- Only authorised Shepardtri Solutions Private Limited staff can open records, and their access is logged too.
How long we keep it
We keep your records while your account is active, so your history stays complete. If you ask us to delete your data, or withdraw consent, we delete it within 30 days, except where the law requires us to keep something longer.
Your rights
You can ask to see the data we hold about you, correct it, delete it, or name someone to act for you if you are unable to. You can also withdraw consent. Withdrawing consent stops further use and leads to deletion of your data.
Deleting your data
Send DELETE to MedHub on WhatsApp (+91 98193 32330), or email venkat.d@shepardtri.com from anywhere, giving the WhatsApp number of the account.
We confirm the request with you on WhatsApp, delete the account, family records and all reports within 30 days, and tell you when it is done.
Grievances and contact
For any question or complaint about your data, contact our grievance officer: Venkat, venkat.d@shepardtri.com.
Shepardtri Solutions Private Limited
11, F-2, Vasantham Appts., Avvai Street, Annai Indira Nagar, Velachery, Chennai, Tamil Nadu 600042, India
If you are not satisfied with our reply, you may approach the Data Protection Board of India.
Changes
If we change this policy in a way that affects you, we will tell you on WhatsApp before the change applies.