Privacy Policy
The short version: We collect only what we need to personalize your experience and find care near you. We never sell your data to advertisers, insurers, or anyone else. You can view, correct, or delete your data at any time from within the app.
1. Who We Are
HealthNav is a health navigation app built by HealthNav Inc., based in New York, NY. We help individuals and families understand their health insurance, find in-network providers, and navigate the US healthcare system.
Privacy questions: privacy@gethealthnav.com
2. What We Collect
2a. Profile data — provided by you during app setup
| Field | Why we collect it |
|---|---|
| Full name | To personalize your experience in the app |
| Email address | To send account-related notices and, with your consent, product updates |
| Insurance plan & plan type | To give you accurate cost estimates and filter in-network providers |
| Insurance member ID | To pre-fill booking flows and verify coverage details |
| ZIP code | To find in-network providers near you via the NPI Registry |
| Biological sex | To generate relevant preventive care reminders (e.g. mammograms, PSA screenings) |
| Date of birth | To personalize age-appropriate health reminders and care timelines |
All fields are provided voluntarily. The app functions with partial information, though some features (provider search, preventive alerts) work best with complete data.
2b. Health documents — processed temporarily, never stored
When you use the Scan feature to photograph a medical order, lab result, or insurance card, the image is sent to our secure processing server to extract the relevant text. We do not store your health documents on our servers. The image is discarded immediately after processing.
2c. What we do NOT collect
- We do not collect your full Social Security number
- We do not collect data from other apps on your device
- We do not collect precise geolocation — only the ZIP code you provide
- We do not track you across other websites or apps
- We do not build advertising profiles
3. How We Use Your Data
- Personalization: your biological sex and date of birth generate age- and sex-appropriate preventive care reminders
- Provider search: your ZIP code and insurance plan filter in-network providers near you
- Cost clarity: your plan type and member ID help estimate your out-of-pocket costs
- Communication: your email may be used for important app updates and security notices. Marketing emails require your explicit consent and include an unsubscribe link
- Product improvement: aggregated, anonymized usage patterns (never individually identifiable) help us improve the app
4. How We Store Your Data
Your profile data is stored in two places:
- On your device — in secure local storage (AsyncStorage). Available offline, persists between sessions.
- On our secure servers — your profile fields are synced to our backend database (Airtable, hosted on AWS infrastructure) to enable future cross-device access and account recovery. Data is encrypted in transit (TLS) and at rest.
Health documents you scan are processed in transit only. They are never written to disk on our servers.
5. How We Share Your Data
We do not sell your personal data. Ever. We do not share it with advertisers, health insurers, employers, or data brokers.
We use the following service providers solely to operate HealthNav:
- Cloudflare Workers — our secure compute layer that routes requests and processes AI responses
- Airtable — our backend database where profile data is stored
- Anthropic (Claude AI) — powers the AI Navigator; receives only the text of your questions, not your profile data
- NPI Registry (public API) — a free government database used to find licensed providers; we send only your ZIP code and specialty
Each provider is bound by their own privacy policies and data processing agreements. We do not authorize them to use your data for their own purposes.
6. HIPAA Notice
HealthNav is a consumer navigation tool, not a healthcare provider, health plan, or healthcare clearinghouse. As such, HealthNav is not a HIPAA-covered entity.
The profile data we collect (name, email, insurance plan, ZIP, biological sex, date of birth) constitutes general personal information, not Protected Health Information (PHI) under HIPAA, when collected without a clinical context.
Health documents you choose to scan are handled with the same care as PHI: processed securely, never stored, and never shared. We are committed to HIPAA-aligned practices as we build toward formal compliance in a future version.
7. Your Rights
- Access: view your profile data anytime in Settings → Personal Information
- Correction: update any field in Settings → Personal Information at any time
- Deletion: delete all your data from Settings → Delete My Data. Local and server-side data is removed within 30 days
- Email opt-out: every marketing email includes an unsubscribe link. You can also email privacy@gethealthnav.com
- Portability: to request a copy of your data in machine-readable format, contact privacy@gethealthnav.com
8. Children's Privacy
HealthNav is not directed at children under 13 and does not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through our app, please contact privacy@gethealthnav.com and we will delete it promptly.
The Family Hub allows you to manage health information for family members including minors. In this case, you — the adult account holder — provide and control that information on their behalf.
9. Data Retention
We retain your profile data for as long as your account is active. Upon deletion request, personal data is removed within 30 days. Anonymized, non-identifiable aggregate data may be retained for product improvement.
10. Security
We apply industry-standard security measures: TLS encryption in transit, encryption at rest, and access controls limited to authorized personnel. Our infrastructure partners (Cloudflare, Airtable) maintain SOC 2 compliance.
No system is perfectly secure. If you believe your data has been compromised, contact us immediately at privacy@gethealthnav.com.
11. Changes to This Policy
When we make material changes to this policy, we will notify you in-app and by email (if provided) at least 14 days before changes take effect. The effective date at the top reflects the most current version.
12. Contact
- Privacy: privacy@gethealthnav.com
- General: hello@gethealthnav.com
- HealthNav Inc. · New York, NY · United States