Master Privacy Policy

1. Scope & Ecosystem Applications Covered

This Privacy Policy is issued by Saathi Healthcare Technologies ("SaathiMed", "we", "our", or "us") and governs the collection, processing, storage, and protection of personal and sensitive healthcare data across all 17 integrated modules and applications within the Saathi Ecosystem:

2. Categories of Information We Collect

2.1 Personal Identifiable Information (PII)

Collected across all user accounts (Patients, Doctors, Technicians, Nurses, Hospital Staff):

• Full legal name, phone number, and verified email address.
• Date of birth, age, biological sex, and residential / clinic address.
• Emergency contact names and relationships (for emergency routing and patient safety).
• Account authentication identifiers (Firebase UID, secure token hashes).

2.2 Sensitive Personal Data & Health Information (SPDI)

Processed under explicit user consent or clinical authorization:

• Clinical Records: Medical consultation notes, diagnostic summaries, clinical diagnoses (ICD-10 coded), treatment plans, and doctor discharge summaries.
• Diagnostic Reports & Images: Pathology test outputs, blood work, radiology files (X-Rays, MRIs, CT scans, ultrasounds), and digital biopsy reports.
• Prescriptions & Pharmacy Orders: Active and past drug prescriptions, dosage schedules, dispensing records, and adverse drug reaction alerts.
• Vital Signs: Blood pressure, blood glucose, SpO2, heart rate, body temperature, and pain score monitoring logs.
• Surgical Records (Saathi OT): Pre-operative clearances, anaesthesia logs, surgical notes, and post-operative monitoring data.

2.3 Healthcare Professional & Institutional Data

• State Medical Council / National Medical Commission (NMC) registration numbers.
• Degree certificates, specialization credentials, hospital affiliations, and digital signatures.
• Hospital staff employee IDs, departmental assignments, and shift rosters.

2.4 Location Data

• Approximate Location (Network-based): Used across patient apps to suggest nearest available verified doctors, pharmacies, and diagnostic laboratories.
• Precise Foreground/Background Location (Saathi Ambulance only): Specifically utilized during active emergency calls to enable real-time GPS dispatching, patient pickup routing, and live tracking for hospital trauma teams. Location tracking ceases immediately upon mission completion.

3. Device Permissions & Transparency

Our Android and web applications only request device permissions strictly necessary for providing healthcare workflows. We never access your hardware or files silently:

4. Strict Commitment: Zero Sale of Data

Your information is used solely to:

• Facilitate clinical care coordination between patients, treating physicians, nurses, labs, and pharmacies.
• Generate AI-assisted differential diagnosis prompts to assist licensed physicians (never replacing clinical judgment).
• Maintain transparent hospital billing and insurance claim verification.
• Comply with Indian healthcare statutory record-keeping mandates.

5. Data Security, Encryption & Storage

• Encryption in Transit: All data transmitted between client devices, servers, and connected hospital databases uses TLS 1.3 encryption with strong cipher suites.
• Encryption at Rest: Patient health records, medical documents, and database volumes are encrypted using industry-standard AES-256 bit encryption.
• Data Sovereignty & Localization: In compliance with Indian data regulations, all primary database clusters and cloud backups are securely hosted within authorized Indian Data Center regions (e.g., Google Cloud India / Mumbai / Delhi).
• Role-Based Access Control (RBAC): Access to medical charts is strictly segregated by clinical role (e.g., a lab technician cannot view billing data, and billing staff cannot alter medical charts).

6. Account Deletion & Right to Erasure

In full compliance with Google Play's User Data & Account Deletion Policy and the DPDP Act 2023, users of any Saathi Ecosystem app can request permanent deletion of their account and personal data at any time.

6.1 What Happens Upon Deletion:

• Immediate Deletion: Your authentication credentials, profile photo, active login sessions, push notification tokens, and personal contact lists are deleted within 48 to 72 hours.
• Statutory Medical Retention Exception: Under the Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002, licensed doctors and hospitals are legally obligated to maintain inpatient clinical records and written prescriptions for a minimum statutory duration (typically 3 years). Such records are permanently stripped of public user identifiers and archived strictly for statutory audit compliance.

7. Grievance Officer & Legal Contact

As mandated under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, you may contact our designated Grievance Officer for privacy concerns, data access, or consent withdrawal: