MedRecall+ Privacy Policy
The short version
MedRecall+ is a personal health record app for your iPhone. It helps you keep your doctors, medications, conditions, visit notes and health records in one place. Your information stays on your phone. We do not run a server that stores your health information. We do not sell it, share it for advertising, use it to train any AI, or track you with analytics.
- You choose every source you connect, and you can disconnect it at any time.
- You decide whether to save a backup, and where it goes.
- You can delete your information in the app at any time.
Who we are
MedRecall+ is made by VezaMed, an independent developer based in North Carolina. In this policy, “we” and “us” mean VezaMed. “The App” means MedRecall+. You can reach us at privacy@medrecallplus.com.
This policy covers the iPhone version of the App, which is currently offered in the United States. We will update it when other versions are released.
What information the App handles
The App handles information only when you type it in or choose to connect a source. Nothing is connected until you choose it, and each source is a separate choice.
| Source | What the App receives | How it works |
|---|---|---|
| What you enter | Doctors, medications, conditions, appointments, visit notes, and voice recordings of visits | Saved on your phone. Voice is turned into text on your phone |
| Hospital or clinic records (through Epic) | Demographics, allergies, health issues, immunizations, medications, test results and vital signs. The App does not retrieve visit notes | You sign in on your hospital's own website and approve what to share. You can uncheck any category. The App only reads. We never see your portal username or password |
| Apple Health | Health measures you allow, such as heart rate, steps, sleep, blood oxygen and body measurements | You approve each type in the iPhone's own permission screen |
| Calendar and Reminders | Events and reminders for appointments you set up in the App | Uses your iPhone's calendar, with your permission |
| Backup accounts (Google, Microsoft, Files) | Only the files the App saves there, so you can back up and restore | You sign in to your own account and grant limited access. See “Backups” below |
What we do not do. The App contains no advertising tools, no analytics tools, and no third-party tracking. We do not collect your name, email address, phone number or location for ourselves. The App has no account with us.
How we use and share information
How the App uses it. Only to do what you ask: show your combined health history, help you prepare for appointments, remind you of appointments, and make backups when you choose. We do not use it for advertising, marketing, research, or to train any AI or other model.
On-device AI. On supported iPhones with Apple Intelligence turned on, a few features use Apple's AI that runs on the phone itself. They summarize a recorded visit into a short conclusion and action items, answer questions about your own saved visits and records, explain a medical term in plain language, and write a plain-language overview of the health information you saved. On iPhones that do not support this, these features are not available. This processing happens on your iPhone. Your recordings, transcripts and records are not sent to us, to Apple, or to any other AI company to produce these results. The App does not give medical advice.
Who receives information, and only at your direction:
- Your hospital or health system, when you connect it, so the App can request your own records.
- Apple, Google and Microsoft, only as part of the permissions and accounts you choose to use (Apple Health, Calendar, Reminders, Files, Google Drive, OneDrive).
What we never do. We do not sell your information. We do not share it with advertisers, data brokers or analytics companies. We do not share any de-identified, anonymized or pseudonymized version of it with anyone, and we do not combine information across users. There is no central database of user information.
Health privacy laws. MedRecall+ is a personal app that you choose to use for your own records. As we understand it, it is not a covered entity or business associate under HIPAA, so HIPAA does not govern the App. Your hospital stays subject to HIPAA for the records it holds, until you direct it to send them to the App. This policy and our Terms of Service describe how the App handles your information.
Where information is stored, backups, and security
On your phone. Your records, notes, recordings and settings are stored on your iPhone. So is a record of your recording-consent notice: the date and time you tapped “I Understand” and the version of the notice you saw. You can view it in Settings, and Delete All Data removes it. We do not operate a server or cloud database that stores your health information.
Backups are your choice. If you turn on backup, the App saves files to a place you pick and sign in to yourself: Google Drive, OneDrive, or a folder in Files. Those files are in your own account, under that company's terms. We never receive them and cannot see them. Records you retrieved from your hospital are included in a backup only when you run one. Voice recordings and transcripts are separate files that you can save to your phone, Google Drive, OneDrive, or Files.
Removing backup copies. Deleting something in the App, or deleting the App, does not delete copies you saved in your own Google Drive, OneDrive or Files. You must delete those yourself in that service.
How we protect it:
- Passwords and access passes (tokens) for connected services are kept in the iPhone Keychain, never in plain text.
- Your records are protected by the iPhone's built-in encryption and app sandboxing.
- Connections to other services use HTTPS and the standard secure sign-in method (OAuth 2.0 with PKCE). You sign in on each service's own page. The App never sees your hospital, Google or Microsoft password.
- The App can be locked with Face ID. You can also set a PIN, which works only as a backup if Face ID does not work.
No method of storage or transmission is completely secure, so we cannot promise absolute security. Keep your iPhone up to date and protected with a passcode.
Medicare connection (planned for a future version)
The current version of the App does not connect to Medicare. We plan to add it in a later version, using the Centers for Medicare & Medicaid Services (CMS) Blue Button API, after CMS approves the App. This section explains how it will work so you can see our commitments in advance. It applies only once that feature is available.
You are asked first. Before you connect, the App will show a plain screen explaining what will be collected, how it will be used, and that it stays on your phone. You must choose to continue. Nothing is connected without your clear permission.
You sign in on Medicare's website. You sign in with your Medicare.gov account on Medicare's own page. The App never asks for, sees, or stores your Medicare.gov username or password.
What the App will request:
- Your Medicare coverage information.
- Your Medicare claims for Parts A, B and D (hospital, doctor and drug claims).
- Basic personal information such as your name and date of birth. You can always choose not to share this on Medicare's screen, and the App will still work.
- Claims about alcohol and substance use treatment are not shared unless you choose to share them on Medicare's screen.
How long it lasts. Medicare approves access for a limited time that CMS sets for each app. When it ends, the App will tell you and ask you to approve again. You can stop it earlier at any time.
Where it is kept. Your Medicare information is saved only on your iPhone. It is not included in backups to Google Drive, OneDrive or Files. We do not sell it, share it, or use it for advertising, marketing, research or AI training. We do not combine it with information from other people.
What it may not show. Medicare claims can arrive days or weeks after care, and some claims are withheld or still being processed. The list in the App may be incomplete, and is not a complete medical record.
Ending the connection. You can disconnect Medicare in the App at any time, which ends the App's access. You can also remove the App in the “My Connected Apps” section of your Medicare.gov account. You will be able to delete your Medicare information from the App at any time. Disconnecting stops new information from arriving. It does not remove information already on your phone, so use the delete option for that.
Other people. If your records mention another person, such as a family member, the App does not collect or use that information about them, and never shares it.
Possible sign-in service. Medicare may require a small service to finish the sign-in step. If we use one, it will not receive or store your Medicare claims, coverage or profile information. We will describe it here before the feature is released, and CMS will review any change to this section before it takes effect.
This product uses the Blue Button APIs but is not endorsed or certified by the Centers for Medicare & Medicaid Services or the U.S. Department of Health and Human Services.
Your choices, deleting your data, and how long we keep it
You are in control.
- Connect or disconnect any source (hospital, Apple Health, Calendar, Google, Microsoft) at any time in the App. Disconnecting stops new information from arriving.
- Remove the App's access at the other end too: through your hospital's patient-portal settings, your Apple settings, or your Google or Microsoft account settings.
- Say no to any permission the App asks for. The rest of the App keeps working.
What happens to information already in the App. Disconnecting a source does not remove what was already imported. To remove it, delete the items in the App, or delete the App itself. Deleting the App removes everything stored on your phone by the App.
Copies you saved elsewhere. Backups, voice recordings and transcripts you saved to Google Drive, OneDrive or Files stay there until you delete them in that service.
How long we keep information. We keep nothing on any server, because we do not operate one for your health information. Your information stays on your phone until you delete it or delete the App. The App has no account with us, so there is no account that can go dormant or need to be closed. If you stop using the App, we hold nothing about you.
Help with deleting. Write to privacy@medrecallplus.com and we will walk you through it. We can only help with the App and your own backup files. We cannot reach information on your phone or in your cloud accounts.
Other people, children, changes and contact
Family members and other people. The App does not ask for genetic data or family medical history. If a record you import mentions a family member, the App uses it only to show your own record to you. It is never extracted, shared, or used to make decisions about anyone else.
Children. The App is not for children, and we do not knowingly collect information from anyone under 18.
Changes to this policy. If we change this policy in a way that affects how your information is used, we will tell you before the change takes effect. Because we do not collect your email address, we will do this with a notice in the App, a notice on our website, and the App Store update notes. The notice will say what changed, and you can stop using the App or delete your information at any time. The date at the top shows the latest version. Any change to how Medicare information is handled will be reviewed by CMS before it takes effect.
If ownership changes. If VezaMed is sold, merged, or its ownership changes in a way that could change how your information is handled, we will tell you in the App before the change takes effect, and we will tell CMS. We will not sell your information, and any new owner would have to follow this policy.
If there is a security problem. If a problem affects your information and the law or good practice requires us to tell you, we will do so without unreasonable delay, using the App, our website and the App Store update notes, and we will tell authorities as required. We will also explain what you can do.
Contact us. Questions, requests for help deleting information, or concerns: privacy@medrecallplus.com. For other help: support@medrecallplus.com. MedRecall+ is made by VezaMed, an independent developer in North Carolina.