Skip to content
Patient data sovereignty & service agreementv2026.4

Your family's medical records belong solely to you

CareSync is built for caregivers who demand strict privacy. We never monetize sensitive lab results, never sell patient data to insurance brokers, and never train public AI models on your loved one's health records.

Zero public model training
256-bit AES encryption at rest
HIPAA-aligned access control
Instant one-click data purge
The data rights problem

Healthcare software frequently sells patient data quietly

Many consumer health apps claim free utility while quietly packaging de-identified patient records for pharmaceutical marketing, insurance pricing algorithms, and third-party advertising brokers. CareSync operates under a strict covenant: your medical data serves one person only — the patient.

Core covenant

Three immutable privacy commitments

1. No AI training on your records

Your clinical records, medication lists, and physician notes are processed strictly in private memory contexts and never used to fine-tune AI foundation models.

Guarantee: Zero residual retention

2. Zero third-party monetization

CareSync does not sell, license, rent, or share patient data with health insurers, pharmaceutical marketers, or data broker syndicates. Period.

Guarantee: No marketing syndicates

3. Permanent export or deletion

You own 100% of your data. You can download Eleanor's complete longitudinal timeline as a portable JSON or PDF brief and purge all records instantly.

Guarantee: 1-click cryptographic wipe
Terms of use

Permitted usage and operational terms

1. Caregiver Relationship: You affirm that you are the patient, legal guardian, or an authorized family caregiver possessing legitimate consent to review and organize these clinical records.

2. Decision Support Only: CareSync synthesizes and translates existing documents generated by licensed physicians. It does not provide medical diagnoses, treatment planning, or emergency clinical triage.

3. Account Security: You are responsible for safeguarding your session authentication. In shared household settings, always log out to prevent unauthorized family viewing of private health records.

4. Accuracy of Uploaded Artifacts: CareSync analysis is directly grounded in uploaded documents. We cannot verify errors or omissions originally committed by external lab clinics or physician EHRs.

Data architecture

How your information travels

1

Encrypted upload

Records are transferred using TLS 1.3 encryption and stored in an isolated tenant enclave with per-patient key segmentation.

2

Stateless reasoning session

The clinical reasoning engine extracts medication interactions and lab deltas in an isolated container that terminates upon query completion.

3

Sovereign patient ownership

Your family retains sole control. Delete records at any point, and all physical and database fragments are permanently purged.

Your trust is our clinical foundation

Have questions about health data compliance or need a Business Associate Agreement (BAA) for clinical institutional use? Our compliance team responds within 24 business hours.

CareSync Data Protection & Privacy Office • Last revised: October 2026