Privacy policy
Your family's health information belongs to you. This page explains — in plain words — what we collect, why, and the control you keep.
This policy covers the Meddio website and early-access list today, and describes how the Meddio platform (app and services) will handle your information when it launches. Meddio is operated from Brahmapur, Odisha, India, and this policy is written to comply with the Digital Personal Data Protection Act, 2023 (DPDPA).
What we collect
- Early access: your name and mobile number, when you join the waitlist.
- Account details: your name, mobile number and login information, when the platform launches.
- Family member profiles: details of family members you add — such as name, age, gender and relationship — added only with their consent.
- Health information: lab reports, prescriptions, consultation records and medicine orders created through Meddio, or uploaded by you.
- Order and payment details: delivery address and order history. Payments are processed by a licensed payment partner; Meddio does not store your card or bank details.
- Device basics: standard technical information needed to run the service securely.
How we use it
- To deliver the services you ask for — tests, reports, consults, medicines and reminders.
- To connect your care: attaching a report to a consult, turning a prescription into an order, reminding you before a refill lapses.
- To meet legal duties — for example, pharmacy and medical record-keeping requirements.
- To keep the service safe, and to support you when you ask for help.
We do not sell your data. We do not use your health information for advertising.
Family access is consent, not ownership
When you manage a family member's care, your access is a grant made with their consent. They can see everything, always. Access can be changed or revoked at any time, and an adult member can move to their own account and take their full record with them.
Where your data lives
Your data is stored on servers located in India, protected with encryption and strict access controls. Access inside Meddio is limited to what each role genuinely needs — a doctor sees the records relevant to your consultation; a pharmacist sees the prescription being verified.
When we share
- With the professionals serving you — the doctor you consult, the pathologist signing your report, the pharmacist verifying your order.
- With service providers who help us operate (such as payment and delivery partners), bound to use it only for that purpose.
- With authorities, when the law requires it.
How long we keep it
For as long as your account is active, or as long as medical and pharmacy record-keeping laws require. When neither applies, we delete it.
Your rights
- Access and correct your information.
- Withdraw consent for a family grant at any time.
- Delete your account and data from inside the app.
- Raise a grievance and have it addressed within the timelines under the DPDPA. If unresolved, you may approach the Data Protection Board of India.
Contact
For any privacy question or request, write to privacy@meddio.in or eng@meddio.in.
Changes
If this policy changes in a way that matters, we'll tell you clearly — not bury it. The latest version always lives on this page.