Last updated 1 September 2026.
The short version. MedSearch has no accounts and no tracking. Your medicines, allergies, conditions and notes are encrypted on your phone and are never uploaded. Voice and photos are processed on the device and never leave it. We cannot read your health record, because we never receive it.
Everything you enter. Your health book — medicines, allergies, conditions, notes, emergency contacts and dose history — is stored in an encrypted database on your phone. The encryption key is held in the device keychain. None of it is transmitted to us or to anyone else.
Symptom descriptions you type or speak are processed entirely on the device. They are not sent anywhere, and they are not stored after the result is shown.
Speech is transcribed by your phone's on-device recogniser. Audio is never recorded to a server. If on-device recognition is unavailable, MedSearch disables voice input rather than falling back to a network service.
Photos are analysed on the device to read printed text on medicine packaging. Images are not uploaded and are not retained. MedSearch does not analyse photographs of your body.
Only what is needed to keep the medical reference current:
No symptom text, no search terms, and no part of your health record is ever included in these requests.
MedSearch ships with no third-party analytics, no advertising SDKs, and no social media trackers. If we add usage analytics in future, it will be opt-in, aggregate, and will never include symptom text, search queries or health record contents.
If you turn on backup, your health record is encrypted on your device before it is sent, using a key derived from your passphrase. We store only ciphertext. We cannot read your records, and we cannot recover them if you lose both your passphrase and your recovery phrase — that is a deliberate consequence of encrypting them properly.
Backup is off by default.
MedSearch is not directed at children under 13 and does not knowingly collect their information. An adult may record a child's medicines and symptoms in their own health book; that data stays on the adult's device under the terms above.
Because your health data never reaches us, there is nothing for us to export or delete on your behalf. You can delete everything at any time from within the app, which erases the encrypted database and its key. If you use encrypted backup, deleting it in the app removes the stored ciphertext.
If this policy changes materially, the app will show the change before you continue using it.
Questions about privacy: son@taskmagic.com