Skip to main content

Consumer health data privacy notice

Effective: Not yet published — pre-launch draftVersion: Draft 1.0

This notice covers medication information specifically. Some state laws — including Washington’s My Health My Data Act and Nevada’s consumer health data law — treat information about the medication you use or buy as health data and require a notice of its own.

Our general privacy notice covers everything else. Where the two overlap, they say the same thing.

What counts as health data here

SlashedRx does not ask about your conditions, your diagnosis, or your treatment. But the medication someone takes is itself revealing, and we are not going to argue otherwise on a technicality.

We treat all of the following as consumer health data:

  • The medication you search for, including its strength and quantity
  • What you tell us you currently pay for it
  • Medications you save to your account
  • The savings options we found for you
  • A medication you ask us to add through the waitlist
  • The ZIP code you enter alongside a search

What we collect and where it comes from

CategorySource
Medication, strength, quantity, current priceYou, typed into the search form
ZIP codeYou, typed into the search form. Never derived from your device or IP address.
Saved medications and household labelsYou, when you choose to save one
Savings options and prices attached to your searchGenerated by us from our own catalogue and from public data sources
Waitlist requestsYou, when you ask for a medication we do not yet cover

We do not buy health data, and we do not receive it from data brokers, pharmacies, insurers, or anyone else. Every piece of it comes from you or is derived from what you typed.

Why we collect it

To run the search you asked for, to show you the result, to let you save a medication and see it again later, and to decide which medications to add next. That is the complete list of purposes.

We do not use it to profile you, to target advertising, to build a health picture of you, or to infer anything about your conditions.

Who it is shared with

WhoWhat they receive
SupabaseDatabase hosting — medication data is stored in a database they operate on our behalf
VercelApplication hosting. Medication information passes through their infrastructure in the course of serving a request
Cost Plus DrugsThe medication name, strength and quantity, in order to look up a cash price. Nothing identifying you, and not your IP address
openFDAThe generic medication name, to check whether an FDA-listed equivalent exists. Nothing identifying you, and not your IP address
AnthropicThe medication name, strength and quantity, and the text of the manufacturer savings page being read, in order to extract what that page offers. Nothing identifying you, and not your IP address

Nobody else receives it.

No advertising network. No analytics company. No data broker. No pharmacy, insurer, or pharmacy benefit manager. There is no third-party tracking script on this site at all.

The Anthropic row is new, and it is the only AI provider involved. It receives a drug name and the text of a public web page. It does not receive your email, your account, your ZIP code, your IP address, your saved medications, or your search history, and it is never asked a question about you. Under the commercial terms that apply to that API, Anthropic states that it does not use inputs or outputs to train its models; we rely on that published commitment rather than claiming to have audited it. The privacy notice sets out in full what the system does and what it is not permitted to decide.

We do not sell it

SlashedRx does not sell consumer health data, and has never sold it. We do not exchange it for money or for anything else of value.

Selling consumer health data would require your separate, signed authorization under Washington and Nevada law. We have not asked for one, because we have nothing to ask about. If that ever changed, it would require a specific, separate request — not a quiet update to this page.

Your rights

You have the right to:

  • Confirm whether we are collecting, sharing, or selling your consumer health data
  • Get a list of the third parties it has been shared with
  • Have it deleted, including from our backups as they cycle
  • Withdraw your consent to its collection and sharing
  • Appeal if we refuse a request

We extend these rights to everyone who asks, wherever they live. Operating one standard is simpler than operating fifty, and the fifty-standard version tends to mean the people in the weakest states get the worst treatment.

How to exercise them

The fastest route to deletion is to sign in and delete your account, which removes your medication history immediately and does not require you to contact anyone or wait for a reply.

For anything else, email [PRIVACY EMAIL]. We aim to respond within 45 days, and will tell you if we need longer.

We will ask you to send the request from the email address on your account. If you searched without an account there is no identity attached to the search for us to match you against — those searches are deleted automatically after seven days.

Appeals

If we decline a request, we will tell you why. You can appeal by replying to that decision, and a different person will review it. If we still decline, we will give you the contact details for your state Attorney General so you can complain to someone who is not us.

Geofencing

SlashedRx does not use geofencing of any kind. We do not track your location, do not build virtual boundaries around pharmacies, clinics, hospitals or any other healthcare facility, and do not send you messages based on where you are.

The only location information in the product is the ZIP code you type into the search form.

Retention and deletion

WhatKept for
Searches run without an account7 days, then automatically deleted
Searches run while signed in90 days, then automatically deleted
Saved medicationsUntil you remove them or delete your account
Waitlist requestsDECISION REQUIRED — retention period not yet set

Both search periods are enforced by a job that runs every day. They are not aspirations written on a policy page.

Contact

SlashedRx is operated by [LEGAL ENTITY NAME].

Health data privacy requests: [PRIVACY EMAIL]
Postal address: [BUSINESS MAILING ADDRESS]

SlashedRx provides medication pricing and savings information and does not provide medical advice. Never change or stop a prescribed medication without speaking with your healthcare professional.

These pages describe how SlashedRx actually works. They are not legal advice, and they do not create rights beyond those the law already gives you.

PrivacyHealth data privacyTermsDisclaimerRefundsContact