Keeping very little, and keeping it carefully
Last updated October 2026. Only claims we can stand behind.
The best protection is not having the data
Most of our security comes from one simple decision: we keep the minimum needed to make the calls. There is no medication list to leak, because we never collect one. Call audio exists only for people who agreed to it, and it is deleted with the account.
What we hold:
- Your name, phone number, and email.
- The first name and phone number of the person we call, and the times to call.
- If you gave it to us, the name and phone number of their doctor or pharmacy.
- The written note of each call: answered or not, what was said about the reminder, and when.
What we do not hold:
- Which medicines anyone takes, or in what dose.
- Audio recordings of any call.
- Payment card numbers. Payments are handled by a payment company; we only see that a payment was made.
- Diagnoses, medical records, or anything a doctor would write down.
Encryption in transit
This website, and everything you send through it, travels over HTTPS. That means the connection between your browser and our server is encrypted, so what you type on the sign-up form cannot be read on the way to us.
Where the data lives
The service runs with established hosting providers, the same kind used by many larger companies. We do not run servers in anyone's home or office. The companies that place the calls and provide Sarah's voice receive only what they need to make each call: the phone number, the time, and what to say.
Who can see it
Access is limited to the small number of people who run the service, and they see it only to do their job: setting up calls, answering your questions, and fixing problems. There is no wider staff, no sales team with a database, and no partner who gets a copy.
The sign-up form
When you fill in the sign-up form, what you type is sent to us by email and stored on our server so we can call you back and set things up. We do not sell, rent, or share that information, and we do not use it for advertising.
Caregiver calls say as little as possible
When Sarah calls you because a reminder call was not answered, she says that, and nothing more. She does not say what medication is involved, because she does not know. Keeping the message plain protects the person's privacy if someone else picks up your phone.
Deleting your information
Ask, and we will delete your account and the call history within 30 days. Email admin@mymedsreminder.com or call (443) 891-4652. We confirm when it is done.
What we do not claim
We are a small, new company at the validation stage, and we would rather under-promise. We do not describe our security as "bank-level". We do not hold a SOC 2 report. We are not "HIPAA certified", and neither is anyone else, because there is no such official certification. Today we do not handle protected health information on behalf of a healthcare organization. If one asks us to, we will put a business associate agreement and the required safeguards in place before we handle any. Our healthcare partner information page explains that approach.
We also cannot promise that nothing will ever go wrong. If we ever learn that your information has been exposed, we will tell you what happened, what it affected, and what we did about it, as quickly as we can.
Security questions
If you have a security question, or you believe you have found a weakness in the site or the service, email admin@mymedsreminder.com with "Security" in the subject line. We read every message and we will reply.