Back to Home

Privacy Policy

How we collect, use, and protect your personal data across the Swastha Sarthi ecosystem.

Last updated: June 18, 2026

Provider: Swastha Sarthi Pvt Ltd
Effective Date: June 18, 2026
Contact: contact@swasthasarthi.com | +91-7067466990

Welcome to Swastha Sarthi, India's digital healthcare infrastructure provider ("Swastha Sarthi", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our unified ecosystem of applications — MediAid (for patients), MediFlow (for pharmacies), MediWell (for doctors), and MediLabs (for diagnostic labs) — together with our website and related services (collectively, the "Platform"). This policy is intended to comply with the Digital Personal Data Protection Act, 2023 (India) and other applicable privacy laws.

By installing, accessing, or using any Swastha Sarthi application or the Platform, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Platform.

Introduction

This Privacy Policy describes how Swastha Sarthi Pvt Ltd and its affiliates collect, use, share, protect, or otherwise process your information and personal data through the Platform. We do not offer services outside India, and your personal data will primarily be stored and processed in India. By visiting the Platform, providing your information, or availing any product or service, you agree to be bound by this Privacy Policy, our Terms & Conditions, and the laws of India. If you do not agree, please do not use or access the Platform.

1. Information We Collect

We collect information to provide, improve, and secure the Swastha Sarthi ecosystem. The types of data we collect include:

1.1 Personal & Account Information

  • Information you provide at onboarding and registration: name, mobile number, email address, and role-specific details such as pharmacy name, clinic/hospital name, lab name, address, GSTIN, store/professional license, and other verification documents.
  • Date of birth and identity/address proof where required for verification or regulatory compliance.
  • Emergency contact details (optional) if you provide them.

1.2 Health & Clinical Data

  • For patients (MediAid): medical history, prescriptions, health reports, medicine schedules, vitals, and family health profiles you choose to store.
  • Prescription data uploaded or scanned (medicine names, dosage, frequency, duration) processed by our AI to support reminders, ordering, and clinical workflows.
  • For doctors (MediWell) and labs (MediLabs): consultation records, diagnosis notes, test catalogs, test records, and uploaded reports.

1.3 Payment & Financial Data

  • Payment details you provide for transactions and payouts (e.g., bank account, UPI ID, card details).
  • Sensitive payment data is collected only with consent and handled per applicable law.

1.4 Inventory & Operational Data

  • For pharmacies (MediFlow) and labs (MediLabs): stock information, batch numbers, expiry dates, quantities, test prices, instructions, order pipeline data, and invoice or delivery challan data.
  • Barcode scan data and other telemetry used to update stock, orders, and analytics.

1.5 Device, Usage & Automatically Collected Data

  • Device and connection data (device type, OS, IP address, device identifiers) and telemetry about how you use the apps (features used, session duration, frequency).
  • Aggregated analytics that do not include personally identifiable information unless you consent.
  • Operational logs maintained for fraud prevention and security monitoring.

You always have the option not to provide information by choosing not to use a particular service or feature on the Platform.

If you receive an email or call from anyone claiming to be Swastha Sarthi and requesting sensitive information (e.g., card PINs, banking passwords, OTPs), do not provide it and report the matter to appropriate law enforcement immediately.

2. How We Use Your Information

We use your data to:

  • Provide and improve services: manage health profiles, process orders and payments, generate invoices, scan prescriptions, and integrate workflows across the Swastha Sarthi ecosystem (e.g., a scanned prescription becoming a pharmacy order, a doctor's schedule, and a lab test pipeline).
  • Communications: send transactional alerts and notifications (medicine, diet and test reminders, stock alerts, order updates, invoices) via WhatsApp, SMS, push notifications, or email using our official channels.
  • Security and fraud prevention: detect and prevent unauthorized access, fraud, or misuse.
  • Analytics & product improvement: improve AI accuracy (e.g., prescription scanning and medicine matching), feature usage, and Platform performance.
  • Legal & compliance: meet legal obligations including tax reporting and other regulatory requirements.

If you do not grant certain permissions, some features or services may be limited or inaccessible.

3. Sharing and Disclosure

We do not sell your personal data. We may share information as follows:

  • Within the ecosystem: between MediAid, MediFlow, MediWell, and MediLabs for integrated functionality (e.g., syncing a prescription from a patient to a pharmacy, doctor, and lab), only where necessary and typically with your consent.
  • Service providers: vendors (e.g., cloud providers, payment gateways, analytics and messaging providers) who help operate the Platform under confidentiality and contractual safeguards.
  • Business partners: logistics and delivery partners, payment processors, and similar parties where required to fulfil transactions and orders.
  • Legal authorities: when required by law (subpoenas, court orders), to comply with the DPDP Act, or to protect rights, property, or safety.
  • Business transfers: in the event of a merger, sale, acquisition, or reorganization; any transfer will remain subject to this Privacy Policy.

4. Security Precautions

We adopt reasonable security practices to protect your personal data from unauthorized access, disclosure, loss, or misuse:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256) where applicable.
  • Role-based access control so only authorized personnel can access sensitive data.
  • Regular security audits and vulnerability assessments.
  • Operational safeguards such as logging and monitoring.

However, no method of transmission over the Internet is completely secure. By using the Platform, you acknowledge the inherent risks in data transmission and remain responsible for keeping your account credentials secure.

5. Data Retention & Deletion

We retain personal data only as long as necessary:

  • We generally retain personal data for no longer than required for the purposes described in this policy or as required by law.
  • Personal data associated with an account is retained for 2 years after account deactivation, unless a longer retention period is required by law or we reasonably believe retention is necessary to prevent fraud or abuse.
  • We may retain anonymized or aggregated data indefinitely for analytical and research purposes.

You may request account deletion through the in-app settings or by contacting us. See our Account Deletion Policy for details. Deletion may be refused or delayed where there are pending disputes, legal obligations, or investigations.

6. Your Rights and Choices

Subject to applicable law, you have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to update inaccurate or incomplete information.
  • Deletion: request erasure of personal data (subject to legal retention obligations).
  • Opt-out: withdraw consent for non-essential processing (e.g., analytics or marketing).
  • Complain: contact us or our Grievance Officer if you believe your rights are violated.

To exercise these rights, email contact@swasthasarthi.com with your account details. We aim to respond within 30 days and may verify your identity before actioning requests.

7. Consent and Communications

By using the Platform or providing information, you consent to the collection, use, storage, and disclosure described here. You also consent to being contacted by us (and our affiliates, partners, and service providers) by SMS, instant messaging apps, phone calls, push notifications, or email for the purposes described in this policy, unless you opt out where applicable.

If you withdraw consent, the withdrawal will not be retrospective and may affect your ability to use certain services.

8. Children's Privacy

The Swastha Sarthi Platform is not intended for individuals under 18. We do not knowingly collect personal data from minors; if we learn we have inadvertently collected such data, we will delete it promptly. Where a guardian manages a minor's health profile, the guardian is responsible for the data provided.

9. International Data Transfers

To provide reliable, scalable services, your data may be stored and processed on servers located outside India. When we transfer data across borders, we use appropriate safeguards (such as Standard Contractual Clauses) to comply with applicable laws including the DPDP Act.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect operational or legal changes. Significant changes will be communicated via the Platform or email, and the "Last updated" date will be revised. Continued use after updates constitutes acceptance.

11. Grievance Officer

If you have concerns or wish to withdraw consent or raise a grievance, contact our Grievance Officer:

(Please include "Withdrawal of consent for processing personal data" in the subject line for consent withdrawal requests.)

12. Contact Us

For questions, to exercise your rights, or to report a security issue:

Acknowledgment

By using the Swastha Sarthi Platform you acknowledge that you have read, understood, and agree to this Privacy Policy effective as of June 18, 2026.

Thank you for choosing Swastha Sarthi!