How we protect health information

Reserve Meds is a digital health company. Medicines are supplied through a US-licensed pharmaceutical wholesale partner. To coordinate a request we need some health information, such as your diagnosis, your prescription and your treating physician's details. This page explains how we protect it. Our Privacy Notice explains in full what we collect, why, who we share it with, how long we keep it and your rights.

About HIPAA

HIPAA is a US law. It applies to health plans, health care clearinghouses, health care providers that carry out certain electronic transactions, and their business associates (US Department of Health and Human Services). We have not confirmed whether HIPAA applies to our service, so we do not describe ourselves as a HIPAA covered entity. We protect your information to the standards on this page and in our Privacy Notice either way.

How we protect your information

• Information travels over encrypted connections (HTTPS). Our database and document storage are encrypted at rest by our hosting provider.
• Patient records can be opened only by signed-in Reserve Meds staff accounts. Every time staff view or export a patient record, it is logged, and administrators can review this log.
• Every staff account must use two-step verification with an authenticator app.
• Portal passwords are stored only as a one-way hash. We never store the password itself.
• Email notifications never include the content of your messages. You sign in to the portal to read them.
• We back up our database and uploaded documents every night to a separate private storage area. Daily backups are kept for 35 days and one backup a month is kept for 400 days.
• We share only what each party needs for your request, such as the wholesale partner that supplies the medicine, the carrier, and the health authority that issues an import permit.

What you can do

• When you can, upload documents in the patient portal instead of sending them by WhatsApp or email.
• Tick "Remember this device" only on your own devices.
• Tell us at once if you think someone else has used your account.

If something goes wrong

No system is perfectly secure. If a security incident affects your information, we will tell you and the authorities where the law requires us to, without unreasonable delay.

Your rights and contact

You can ask to see, correct or delete your information, and you can withdraw your consent. Our Privacy Notice explains how. Email privacy@reservemeds.com. Arabic version: كيف نحمي المعلومات الصحية.

Review status: reviewed by the Reserve Meds compliance team.