Privacy Policy
The full version. For a plain-English summary, see our privacy approach. See also our Terms of Use.
1. Who we are
HospitAlert LLC ("HospitAlert," "we," "us") operates the HospitAlert mobile app and hospitalert.com (together, the "Service"). This policy explains what we collect, why, and the choices you have. It applies to app users, the emergency contacts they add, and website visitors.
HospitAlert is not a healthcare provider, and is not a HIPAA covered entity. Information you store in HospitAlert is protected under this policy and applicable state and federal consumer privacy laws.
2. Information we collect
| Category | Examples | Source | Required? |
|---|---|---|---|
| Account information | Name, email, phone number, date of birth, address, password (stored hashed) | You | Yes, except address |
| Emergency contacts | Contact names and phone numbers; whether they accepted your invitation | You | At least one |
| Precise location | GPS/device location, including in the background when the app is closed | Your device, with your permission | Yes, for core alerts |
| Facility events | That your device entered or left a hospital or ER, which facility, and when; whether you dismissed the alert | Generated by the app | Yes, for core alerts |
| Medical card (optional) | Allergies, medications, medical and surgical history, health system, insurance, doctors, code-status notes | You | No — entirely optional |
| Healthcare-worker settings | Facilities you've excluded because you work there | You | No |
| Payment information | Subscription status. Card details are handled by Apple, Google, or Stripe — we never see or store full card numbers | Payment processor | Only for paid plans |
| Device and diagnostic data | Device model, OS version, app version, app crash logs, and logs you attach through "Report a problem" | Your device | Yes (crash/diagnostic) |
| Support communications | Messages you send us | You | No |
We do not collect your contacts list, photos, microphone, or browsing activity in other apps. We do not use advertising identifiers.
3. How we use it
- To run the core alert: detect when you arrive at or leave a hospital or ER, ask you to confirm or dismiss, and, if you don't respond within the window you set, notify your emergency contacts with the facility's name, phone number, and any medical-card details you chose to include.
- To run your account: sign-in, subscriptions, groups, settings, and support.
- To keep the Service working and safe: fix bugs, reduce false alerts, prevent fraud and abuse, and secure our systems.
- To communicate with you: service messages, security notices, and — only if you opt in — product updates.
- To meet legal obligations.
We do not sell personal information, share it for cross-context behavioral advertising, build advertising profiles, or use your location or health information for any purpose other than providing the Service to you.
4. Who we share it with
- Your emergency contacts — only the alert contents described above, and only when an alert is triggered or you send one manually.
- Service providers who process data on our behalf under contracts that limit use to providing services to us: cloud hosting and database (Google Firebase / Google Cloud), text message delivery (Twilio), and payments (Apple, Google, Stripe).
- Legal and safety: when required by valid legal process, or to protect someone's life or safety. We will notify you of legal requests where the law allows.
- Business transfers: if HospitAlert is merged or acquired, your information would transfer only subject to this policy, and we would notify you first.
We do not share your data with hospitals, insurers, employers, or data brokers. None of the sharing described in this section includes text messaging opt-in data or consent, which is never shared with any third parties (see section 5).
5. Text messages
When you add someone who doesn't have the app yet, you can choose to send them a text inviting them to join, and you can send it again if needed. We also text you a verification code when you register, add, or change your phone number. We don't send alerts or marketing messages by text. Message and data rates may apply; message frequency varies. Reply STOP to any message to opt out, or HELP for help, or email admin@hospitalert.com. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.
6. Location and background tracking
HospitAlert only works if it can see your location while the app is closed. We ask for "Always" location permission for that reason. Location is used to check whether you are at a hospital or ER in our facility database. We do not sell it, build a history of everywhere you've been for any other purpose, or share it except as part of an alert you configured.
You can turn off location access at any time in your device settings. Doing so stops HospitAlert from detecting arrivals. Some features may be limited or unavailable in certain states where the law restricts location-based services near healthcare facilities.
7. Consumer Health Data Privacy Policy
This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act, Nevada SB 370, and similar laws. Because HospitAlert detects visits to healthcare facilities and lets you store medical details, we treat the following as consumer health data: facility arrival/departure events, precise location at or near healthcare facilities, healthcare-worker exclusions, and everything in your medical card.
What we collect and why
The categories and purposes are listed in sections 2 and 3. We collect consumer health data only to provide the alert service you request.
Sources
You, and your device's location services.
Who we share it with
Your chosen emergency contacts (when an alert fires) and the service-provider categories in section 4 (processors acting only on our instructions). We do not sell consumer health data.
Consent
We ask for your consent before collecting consumer health data, and separately before sharing it with your emergency contacts. You can withdraw consent at any time in the app or by contacting us.
Your rights
You can confirm whether we hold your consumer health data, access it, get a list of every third party and affiliate it was shared with (and their contact information), withdraw consent, and have it deleted. See section 8 for how. We will respond within 45 days. If we deny a request, you may appeal by replying to our decision; if the appeal is denied you may contact your state Attorney General.
8. Your choices and rights
- In the app: edit or delete your medical card, change contacts, adjust alert settings, and turn off location.
- Delete your account: Settings → Account → Delete account. This deletes your account and associated data, subject to section 9.
- Access, correction, deletion, portability, and opt-outs: depending on where you live (including California, Washington, Nevada, Colorado, Connecticut, Virginia, Texas, Oregon, and other states), you may have the right to know what we hold, get a copy, correct it, delete it, and limit use of sensitive information. We extend these rights to all users regardless of state.
- How to ask: email admin@hospitalert.com from the email on your account. We may need to verify your identity. You may use an authorized agent.
- No discrimination: we will not deny service or charge differently for exercising your rights.
- Emergency contacts: if someone added you as a contact, you can decline the invitation or remove yourself at any time in the app. Removing yourself also blocks that person from adding you again.
California residents: we do not sell or share personal information as defined by the CCPA, and we use sensitive personal information only to provide the Service.
9. How long we keep data
- Account and medical-card data: while your account is active; deleted within 30 days of account deletion.
- Location data: processed on the fly to detect facilities; raw location is not stored beyond what is needed for an active detection.
- Facility events and alert history: 90 days, unless you delete them sooner.
- Diagnostic logs: up to 90 days.
- Backups: overwritten on a rolling basis within 35 days.
- Records we must keep by law (such as billing records): as long as the law requires.
10. Security
We encrypt data in transit and at rest, restrict access to staff who need it, and use industry-standard authentication. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.
11. Children
Children under 18 can use HospitAlert when a parent or legal guardian sets it up on their phone. When a parent does this, the parent consents on the child's behalf to the collection and sharing described in this policy.
From a child's device we collect only what the alert service needs. We never use a child's information for advertising, and we do not sell it. A parent can review, correct, or delete their child's information at any time by emailing admin@hospitalert.com.
Children should not create an account on their own. If you believe a child is using HospitAlert without a parent's or guardian's consent, contact us and we will delete that information.
12. Where data is stored
We store data in HospitAlert's Google Firebase account, which runs on Google Cloud infrastructure. Access by our team or contractors outside the U.S. is limited to what is needed to operate and support the Service and is protected by contractual and technical safeguards.
13. Changes to this policy
We will post updates here and change the "Last updated" date. For material changes — especially to how we use location or health data — we will notify you in the app or by email, and ask for new consent where the law requires it.
14. Contact us
HospitAlert LLC
8 The Green, Suite #24527
Dover, DE
Email: admin@hospitalert.com
Effective September 23, 2026 · Last updated September 23, 2026