FhirLabs — Privacy Policy

Last updated: August 3, 2026

What we collect

Nothing. FhirLabs has no backend server operated by the developer. Your health information travels directly from your health system's FHIR server to your device over TLS.

Where your data lives

• Health information is displayed on your device and held only in the app's memory and private app storage.
• OAuth access/refresh tokens are stored in the app's private storage on your device.
• Signing out deletes the stored tokens. Uninstalling the app deletes everything.

What we share

Nothing. No health data, identifiers, analytics, or telemetry are transmitted to the developer or any third party.

Third parties

The only parties that see your data are you and your health system (which already holds your record). Authorization happens on your health system's own login page; FhirLabs never sees your password.

Revoking access

Revoke the app's access at any time from your patient portal's connected-apps/security settings, and/or sign out in the app.

Contact

kriskraw80@gmail.com