Consumer health data privacy notice
This notice covers medication information specifically. Some state laws — including Washington’s My Health My Data Act and Nevada’s consumer health data law — treat information about the medication you use or buy as health data and require a notice of its own.
Our general privacy notice covers everything else. Where the two overlap, they say the same thing.
What counts as health data here
SlashedRx does not ask about your conditions, your diagnosis, or your treatment. But the medication someone takes is itself revealing, and we are not going to argue otherwise on a technicality.
We treat all of the following as consumer health data:
- The medication you search for, including its strength and quantity
- What you tell us you currently pay for it
- Medications you save to your account
- The savings options we found for you
- A medication you ask us to add through the waitlist
- The ZIP code you enter alongside a search
What we collect and where it comes from
| Category | Source |
|---|---|
| Medication, strength, quantity, current price | You, typed into the search form |
| ZIP code | You, typed into the search form. Never derived from your device or IP address. |
| Saved medications and household labels | You, when you choose to save one |
| Savings options and prices attached to your search | Generated by us from our own catalogue and from public data sources |
| Waitlist requests | You, when you ask for a medication we do not yet cover |
We do not buy health data, and we do not receive it from data brokers, pharmacies, insurers, or anyone else. Every piece of it comes from you or is derived from what you typed.
Why we collect it
To run the search you asked for, to show you the result, to let you save a medication and see it again later, and to decide which medications to add next. That is the complete list of purposes.
We do not use it to profile you, to target advertising, to build a health picture of you, or to infer anything about your conditions.
We do not sell it
SlashedRx does not sell consumer health data, and has never sold it. We do not exchange it for money or for anything else of value.
Selling consumer health data would require your separate, signed authorization under Washington and Nevada law. We have not asked for one, because we have nothing to ask about. If that ever changed, it would require a specific, separate request — not a quiet update to this page.
Consent
We collect medication information because you entered it in order to get a result. That is the service you asked for, and we do not collect it for any purpose beyond providing it.
We do not require you to consent to anything optional in order to use SlashedRx, because there is nothing optional to consent to. There are no advertising cookies, no tracking, and no secondary uses.
You can withdraw consent at any time by deleting your data, which is described below. Withdrawing consent does not undo processing that already happened, but it does remove the data.
Your rights
You have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data
- Get a list of the third parties it has been shared with
- Have it deleted, including from our backups as they cycle
- Withdraw your consent to its collection and sharing
- Appeal if we refuse a request
We extend these rights to everyone who asks, wherever they live. Operating one standard is simpler than operating fifty, and the fifty-standard version tends to mean the people in the weakest states get the worst treatment.
How to exercise them
The fastest route to deletion is to sign in and delete your account, which removes your medication history immediately and does not require you to contact anyone or wait for a reply.
For anything else, email [PRIVACY EMAIL]. We aim to respond within 45 days, and will tell you if we need longer.
We will ask you to send the request from the email address on your account. If you searched without an account there is no identity attached to the search for us to match you against — those searches are deleted automatically after seven days.
Appeals
If we decline a request, we will tell you why. You can appeal by replying to that decision, and a different person will review it. If we still decline, we will give you the contact details for your state Attorney General so you can complain to someone who is not us.
Geofencing
SlashedRx does not use geofencing of any kind. We do not track your location, do not build virtual boundaries around pharmacies, clinics, hospitals or any other healthcare facility, and do not send you messages based on where you are.
The only location information in the product is the ZIP code you type into the search form.
Retention and deletion
| What | Kept for |
|---|---|
| Searches run without an account | 7 days, then automatically deleted |
| Searches run while signed in | 90 days, then automatically deleted |
| Saved medications | Until you remove them or delete your account |
| Waitlist requests | DECISION REQUIRED — retention period not yet set |
Both search periods are enforced by a job that runs every day. They are not aspirations written on a policy page.
Contact
SlashedRx is operated by [LEGAL ENTITY NAME].
Health data privacy requests: [PRIVACY EMAIL]
Postal address: [BUSINESS MAILING ADDRESS]
SlashedRx provides medication pricing and savings information and does not provide medical advice. Never change or stop a prescribed medication without speaking with your healthcare professional.
These pages describe how SlashedRx actually works. They are not legal advice, and they do not create rights beyond those the law already gives you.