Your Health Data Stays on Your Device
Second Opinion uses a local-first architecture. Your health information, symptom logs, medical documents, and consultation history are stored only on your device - not on our servers.
This means:
- Your symptom entries never leave your iPhone
- Medical documents you upload stay in your device's secure storage
- Your consultation history is stored locally in an encrypted database
- HealthKit data is read locally and never transmitted
We believe your health data is yours alone. That's why we built Second Opinion to keep it on your device.
Introduction
Second Opinion ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.
Information We Collect
Information You Provide
- Health Queries: Questions and symptoms you enter during consultations
- Assessment Responses: Answers to health assessment questionnaires
- Session Data: Conversation history within consultation sessions
Automatically Collected Information
- Device Information: Device type, operating system version
- Usage Analytics: App feature usage, session duration (anonymized)
- Crash Reports: Technical error logs to improve app stability
How We Use Your Information
We use your information to:
- Provide AI-powered health research assistance
- Generate personalized health insights based on your queries
- Improve the accuracy and relevance of our responses
- Enhance app functionality and user experience
- Ensure technical stability and security
Data Storage and Security
What Stays on Your Device (Local-Only)
- Symptom Logs: All symptom entries stored in local SQLite database
- Medical Documents: PDFs, lab results, and photos stored in device filesystem
- Consultation History: All AI conversation history stored locally
- HealthKit Data: Read from Apple Health, never transmitted externally
- Health Summaries: AI-generated insights stored on device
What We Process (Ephemeral)
- AI Queries: When you ask a health question, it's sent to our servers for AI processing, then immediately discarded - we don't store your queries
- API Processing: Health queries are processed through secure, encrypted connections
- No Permanent Storage: We do not permanently store your health information on our servers
What We Store (Cloud)
- Account Credentials: Email and authentication tokens (for login)
- Referral Data: If you use our referral program, referral codes and credit balances
Security
- Local Encryption: SQLite database uses platform-native encryption
- Transmission: All data transmission uses industry-standard TLS encryption
- No Third-Party Sharing: We never sell or share your health data
Third-Party Services
Our app uses the following third-party services:
- AI Language Models: To process and respond to health queries (no personal identifiers are transmitted)
- Medical Literature Databases: To provide evidence-based citations (queries are anonymized)
Your Rights
You have the right to:
- Delete Data: Clear your consultation history at any time within the app
- Access Information: Review information stored in your active sessions
- Opt Out: Stop using the app at any time; local data can be removed by uninstalling
- Account Deletion: Delete your account and all associated data through Settings
Children's Privacy
Second Opinion is not intended for users under 18 years of age. We do not knowingly collect information from children under 18.
Medical Disclaimer
IMPORTANT: Second Opinion is not a medical service. We provide AI-assisted health research tools only. We do not:
- Provide medical diagnoses
- Replace professional medical advice
- Prescribe treatments or medications
- Establish doctor-patient relationships
Always consult qualified healthcare professionals for medical decisions.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes through the app or by updating the "Last Updated" date.
Contact Us
If you have questions about this Privacy Policy:
California Privacy Rights
California residents may request information about data sharing practices. Contact us using the information above.
GDPR Compliance (EU Users)
For EU users, we comply with GDPR requirements. You have additional rights including data portability and the right to erasure. Contact us to exercise these rights.
By using Second Opinion, you agree to this Privacy Policy.