Privacy Policy

Your information. Handled with care.

This page explains exactly how Silent Aid collects, uses, protects, and shares your emergency health information — and the controls you have over it. Written in plain language, not legal boilerplate.

Last updatedMay 2026
StageMVP · Pilot-readiness
15sections covered
No advertising. Ever.No sale of health dataConsent controls your profileEvery access logged and audited
⚠️

Important notice

Silent Aid is currently at MVP and pilot-readiness stage. This policy explains our current privacy approach in plain, honest language. It is not a substitute for formal legal advice and will be refined as the platform undergoes legal, clinical, and data protection review. We share our stage openly because trust is built through transparency — not by overstating maturity we haven't yet reached.

01

Information we collect

Silent Aid collects only the information needed to operate emergency readiness workflows safely and responsibly. This includes information provided by users, patients, healthcare facility staff, and facility administrators.

  • Identity details — name, date of birth, phone number, email address, and platform identifiers
  • Emergency profile information — blood group, allergies, chronic conditions, current medications, and care preferences
  • Emergency contacts and next-of-kin details
  • Insurance and payer information, where provided
  • Consent status and emergency access preferences
  • Facility registration details and staff account information
  • Audit logs — access events, timestamps, IP address, and device/browser information where applicable
02

How we use your information

Your information is used to make Silent Aid work as intended — for emergency readiness, controlled access, platform safety, and accountability. We do not use it for advertising or sell it to third parties.

  • To help users create, manage, and keep their emergency profiles current
  • To allow verified facility staff to access emergency-relevant information during approved emergency workflows
  • To verify users, facilities, and facility administrators before granting access
  • To send OTP verification codes and important account notifications
  • To maintain audit logs for all sensitive access events
  • To detect misuse, enforce access rules, and maintain platform integrity
  • To improve the platform through pilot validation and responsible product development
03

Emergency access

Emergency access is built for one purpose: helping verified healthcare staff get the information they need when a patient cannot speak for themselves. It is not a general-purpose data lookup. Every access event requires authentication, facility approval, and a stated emergency reason.

  • Staff must be individually authenticated before accessing any emergency workflow
  • The facility must be approved and verified by Silent Aid administrators
  • A valid emergency reason must be provided before a profile is displayed
  • QR and wearable identifiers initiate a lookup — they do not bypass access controls
  • Every emergency access event is logged and reviewable
04

Consent and your control

You are in control of your emergency profile and the consent that governs how it can be accessed. Silent Aid is built around consent-aware workflows — meaning your choices shape what happens when your profile is requested.

  • You choose what information to include in your emergency profile
  • You can update your consent settings at any time
  • If consent is not in place, the emergency workflow will not expose your profile
  • You can update, correct, or request deletion of your information at any time by contacting support
05

Facility and staff access

Facility access is tightly controlled. Only approved facilities with authenticated, role-assigned staff can access emergency workflows. Different staff roles have different levels of visibility, and no staff member can access information outside their approved scope.

  • Facilities are reviewed and approved before any access is activated
  • Facility administrators manage and control their own staff accounts
  • Role-based access controls limit what each staff member can see
  • Facilities can only access information relevant to their authorized emergency workflows
06

Audit logs and accountability

Every sensitive action on Silent Aid is recorded. Audit logs exist to protect users, support facility oversight, and give platform administrators the visibility they need to ensure the system is used responsibly.

  • Logs capture the facility, staff member, patient profile accessed, emergency reason, and timestamp
  • IP address and user agent are recorded where available
  • Facility administrators can review access activity within their own facility
  • Platform administrators have oversight of all sensitive access events
  • Audit records are retained to support accountability, review, and dispute resolution
07

Notifications

Silent Aid sends notifications to support account security, emergency workflows, and platform operations. We do not send marketing messages.

  • OTP verification codes for account access and identity confirmation
  • Account and facility verification messages
  • Emergency-related notifications, including next-of-kin contact where applicable
  • SMS is the primary channel; email fallback is used when SMS is unavailable and an email address is on file
08

Data sharing

Silent Aid does not sell your health information. Your emergency profile information is only shared through controlled, purpose-limited workflows — never for commercial use.

  • Emergency profile information is shared only through the platform's controlled emergency access workflows
  • Information may be shared through user-authorized actions within the platform
  • Facility workflows may surface relevant details to authorized staff during emergency care
  • Data may be shared where required for legal compliance, safety obligations, or fraud prevention
  • Silent Aid does not sell, license, or share health data with advertisers or data brokers
09

Service providers

Silent Aid uses trusted third-party providers to operate the platform. These providers handle infrastructure, not your health data, and are used only to the extent necessary for the platform to function.

  • Cloud hosting and database infrastructure
  • Email and SMS delivery services for notifications and OTP
  • Monitoring and error tracking for platform reliability
  • Analytics tools for platform improvement, where applicable
  • All providers are selected with data minimization and platform security in mind
10

Data security

Silent Aid applies multiple layers of protection to reduce risk across every part of the platform. Security is not a single feature — it is a continuous practice.

  • Role-based access controls limit what each user type can see and do
  • Individual staff authentication before any emergency workflow access
  • Rate limiting on all sensitive API endpoints
  • Separated production and staging environments
  • Audit logging for all sensitive access events
  • Security controls are continuously reviewed and strengthened as the platform grows
11

Data retention

Silent Aid retains information for as long as necessary to provide the service, maintain auditability, meet legal obligations, and support safety. We do not retain data longer than needed.

  • Account and emergency profile data is retained while your account is active
  • Audit logs and emergency event records are retained to support accountability and review
  • Consent records are retained to document and respect access decisions
  • You may request deletion of your account and personal data by contacting support
  • Retention rules will be formalized during legal and clinical review
12

Your rights and requests

You have rights over your information. Silent Aid is committed to handling data requests with care, transparency, and appropriate verification to protect you.

  • Request access to the information we hold about you
  • Correct or update inaccurate information in your emergency profile
  • Request deletion of your account and associated personal data
  • Raise a privacy concern or report a suspected data issue
  • Some requests may require identity verification to protect against unauthorized modification of sensitive data
13

Children and dependents

Silent Aid may expand to support guardian-managed profiles for children and dependents in the future. During the current MVP and pilot stage, any workflows involving minors or dependents require particular care and will involve additional consent and verification controls.

  • Dependent and guardian workflows are not yet available in the current platform version
  • Any future implementation will include additional consent, verification, and safeguarding controls
  • If you have a specific request relating to a child or dependent, contact the support team directly
14

Changes to this policy

This Privacy Policy will be updated as Silent Aid evolves — particularly as the platform moves through pilot validation, legal review, and clinical feedback. We believe in plain-language transparency, and we'll communicate meaningful changes clearly.

  • The 'Last updated' date at the top of this page reflects the most recent revision
  • Significant changes will be communicated to active users where possible
  • The most current version of this policy is always available at this URL
15

Contact and privacy requests

For privacy questions, data access requests, deletion requests, or any concern about how your information is handled — reach out. We respond to every genuine request personally.

  • Email: support@silentaid.app
  • Privacy and data requests: use the contact page
  • Security concerns: security@silentaid.app

Your trust matters

Privacy isn't a policy we comply with. It's how we build.

Silent Aid exists to help people in emergencies — and that only works if the people using it trust us with their most sensitive information. That trust is something we earn every day, through transparency, honest communication, and responsible design decisions.