PRIVACY & TRUST

Health information deserves discretion.

Health information is personal. MEDRELEX’s intended approach places permission, source clarity, and responsible use at the center of the product vision. Those principles must be implemented, tested, and reviewed—not merely stated.

Principles we intend to build around

Each principle represents a deliberate architectural constraint, qualified by our current development maturity.

Permissioned access

Future access should be based on a clear authorization model, with people able to understand who is permitted to see relevant information.

Truth Qualifier:Design goal; implementation not asserted.

Source clarity

People should be able to see where an item came from and when it was recorded or reported.

Truth Qualifier:Intended product behavior.

Verification states

The design should distinguish information that is user-reported, source-verified, user-confirmed, or clinically reviewed where those states are available and meaningful.

Truth Qualifier:Proposed model; do not imply every state exists today.

Least privilege

Access should be limited to what a person or role needs and is authorized to see.

Truth Qualifier:Architecture goal, subject to implementation and review.

Responsible interpretation

Any future generated summary or interpretation should be clearly identified, contextualized, and never presented as a definitive diagnosis.

Truth Qualifier:Design goal; no live medical AI feature is claimed.

Transparency

Policies should explain what information is collected, why it is used, how it is protected, and how people can contact MEDRELEX.

Truth Qualifier:Publish only approved, accurate policies for the actual website and product stage.

What this website currently collects

This public website is intended to collect only the contact and professional-interest details submitted through its forms. Do not submit medical records, diagnoses, medication lists, or other sensitive health information through this website. The final published Website Privacy Notice must describe the actual fields, recipients, processors, retention practices, and contact route used at launch.

What we are not claiming

This page does not claim that MEDRELEX is HIPAA compliant, certified, clinically validated, or operating a production health-data service. Any future handling of real U.S. patient data will require appropriate privacy, security, technical, and legal review before launch.

Have questions regarding our privacy architecture?

Reach out to discuss our proposed authorization models and data governance goals.

Contact MEDRELEX about privacy