Privacy and security

Medication data is health data. Medsage is built accordingly.

Access control

• Role-based access: patients, caretakers, support, and admins have distinct permissions. Caretakers only see the patients and devices linked to them.
• On the device, settings and schedule changes are locked behind the caretaker PIN, and caretaker mode auto-locks after an idle timeout.
• Adding a caretaker requires physical proximity: a one-time QR pairing token from the device’s screen, or its PIN over Bluetooth.

Data protection

• Communication between devices, apps, and Medsage servers is encrypted; devices authenticate to the cloud with per-device certificates that can be revoked.
• Administrative and schedule changes are captured in an audit log — who changed what, when, from where — designed to support HIPAA-style accountability.
• Patients don’t need accounts, so there are no patient passwords to leak. Caretaker accounts use standard authenticated login.

Camera and microphone

• The optional camera records refill sessions only, as an audit trail, and those recordings are stored locally on the device’s SD card — they are not uploaded.
• The microphone is used only when speech recognition is enabled, to transcribe short wellness-check notes.

Your data

Adherence history exists to serve the patient and their caretakers. Export options (CSV report attachments) keep the data portable for doctors. For data deletion requests or privacy questions, contact us through the website’s contact form.