English · Français

Privacy policy — LaboMed

Last updated: October 6, 2026

Draft: items in square brackets must be completed and the full text reviewed by a US healthcare privacy attorney before the app is offered to real patients. This English version prevails.

1. Who we are

[Laboratory legal name], [street address, city, state, ZIP], United States — e-mail: labom1082@gmail.com. LaboMed is a mobile app for at-home specimen collection, lab results, doctor appointments, video visits and prescriptions.

2. Health information and HIPAA

When LaboMed acts for a laboratory or healthcare provider covered by the Health Insurance Portability and Accountability Act (HIPAA), your protected health information (PHI) is handled under that provider's Notice of Privacy Practices [link to be added], and our service providers that handle PHI sign Business Associate Agreements.

Pilot phase: until the HIPAA safeguards above are in place, the app is used for demonstrations and tests only. Please do not enter real medical information during the pilot.

3. Information we collect

• Account: name, e-mail address, phone number, sign-in method (e-mail, Google, Facebook, SMS).
• At-home collection bookings: ordered test, date and time, address, map location you set, whether you have a prescription, contact phone.
• Doctor appointments: doctor, specialty, date, type (office, home, video) and status.
• Health information: lab reports (PDF), prescriptions written in the app by your doctor, photos of paper prescriptions you upload, messages with the lab or a doctor, and the optional health profile (blood type, allergies, conditions, medications).
• Health insurance: carrier, plan, member ID, group number, policyholder name, relationship and date of birth, and photos of the front and back of your insurance card.
• Payments: amount and date of online payments. Card details are entered on Stripe's page; LaboMed never sees or stores your card number.
• Nurses (phlebotomists): location during visits, only while marked as available.
• Device: notification token (Firebase Cloud Messaging) and chosen language.

Video visits are not recorded.

4. How we use it

• Schedule at-home collections and assign a nearby nurse.
• Manage appointments, video visits and prescriptions.
• Deliver lab results to you.
• Bill your insurance or give you an itemized receipt for reimbursement.
• Process online payments.
• Answer your messages and send service notifications (nurse on the way, appointment confirmed, result or prescription available).

We never sell your information and never use it for advertising.

5. Who can see it

Only you, authorized laboratory staff, the nurse assigned to your booking and the doctor you consult can access the information needed for their task. Prescriptions you attach to a booking and your insurance details are visible to authorized lab staff.

6. Service providers

• Google Firebase / Google Cloud (sign-in, database, notifications).
• Cloudflare (API and encrypted storage of lab reports, prescription photos and insurance card photos).
• Agora (real-time video transport, no recording).
• Stripe (online card payments).
• OpenStreetMap (map display).

7. Retention

Account information is kept while your account is active. Lab reports and medical records are kept for the period required by federal and state law [period], then deleted. You can delete uploaded prescription photos and insurance information at any time.

8. Your rights

You may access, correct or delete your information. Residents of certain states (for example California, Washington, Colorado, Connecticut, Virginia) have additional rights under state privacy laws. You can delete your account in the app (My profile > Delete my account) or by writing to labom1082@gmail.com. Deletion cancels upcoming bookings and appointments and erases your name, phone number and address from your history; records we must keep by law are retained for the legal period.

9. Security

Data is encrypted in transit (HTTPS); files are served only through short-lived signed links, and access is restricted by security rules according to each user's role.

10. Children

The app is intended for adults. A parent or legal guardian manages care for minors.

11. Contact

Questions or requests: labom1082@gmail.com.