Privacy
Last updated 23 August 2026
This service exists to help you find a family doctor. It is not a clinic and not part of any health system, so it holds no medical records and asks nothing about your health. This page says exactly what is kept, where, for how long, and how to have it removed.
We do not collect health information
We never ask about your conditions, symptoms, medications, or care you have received, and there is nowhere on this site to enter them. Nothing we hold is a health record, and this service is not a custodian of personal health information under Ontario’s PHIPA. Please do not include health details in a report, an enquiry, or any other free-text box — if you do, we will delete it.
If you create an account
An account is an email address. We store it encrypted, alongside a one-way scrambled copy used only to look you up, so a copy of the database is not an address book. If you set a password we store only a slow one-way hash of it, never the password. If you sign in with Google we receive your email address from Google and nothing else — no contacts, no profile, no Google activity. Sign-in links and session records are stored as hashes and expire.
What stays on your device and is never sent to us
Your name, postal code and address on the Profile page are saved in your browser only. They are used to rank clinics on your screen and are never transmitted to our servers. The same is true of the note of which clinic you last phoned, which is what lets us ask how the call went. Clearing your browser data removes all of it.
What reaches our servers, and only when you act
Searching sends the place you typed so we can turn it into coordinates. Reporting a clinic’s status sends the clinic, what you were told, and the date — attributed to your account if you are signed in, or to a random code stored in your browser if you are not. Sending an enquiry sends your name, your email and your message, so that a person can reply. Asking to speak for a clinic sends your name, role, work email, and the clinic’s phone number and website, which we use to verify the request by calling the clinic. Signing up for notifications sends your email and the first three characters of your postal code — never the full code.
Third parties
Turning a place name into coordinates uses Google’s Maps and Places services, so the text you type into the search box is sent to Google and is subject to Google’s privacy policy. Map imagery is served by OpenStreetMap. Email we send you passes through our email provider to reach your inbox. We use no advertising networks, no third-party analytics, and no tracking pixels.
Usage measurement
We record which parts of the site are used — a search happened, a clinic card was opened — to see what is working. Any coordinates in those records are rounded to roughly one kilometre before they are stored, email addresses are stripped, and the records are not linked to your account.
Where it is stored
In a database hosted in a Canadian cloud region. Access is limited to the people who operate the service. Connections to this site are encrypted.
How long we keep it
Accounts are kept until you ask us to close them. Notification signups end the moment you use the unsubscribe link in any email, which deletes the signup and everything attached to it. Enquiries and clinic access requests are kept while we deal with them and for a reasonable period afterwards so we can answer follow-up questions. Status reports are kept because the record of what a clinic said, and when, is the product — but a report carries a scrambled code rather than your identity, and reports can be detached from an account on request.
What we never do
We do not sell your information, share it with advertisers, or pass it to clinics. We do not tell a clinic who reported something about them. Anything we publish — counts of clinics accepting patients, for example — is aggregated so no individual can be identified. We disclose information only where the law requires it.
Cookies and local storage
We set no advertising or tracking cookies. The site uses your browser’s local storage to keep you signed in, remember your language, and hold the profile described above.
Your rights
Under Canada’s PIPEDA you may ask what we hold about you, ask us to correct it, ask for a copy, or ask us to delete it, and you may withdraw consent at any time. Email us and we will respond within 30 days. If you are unhappy with our answer you may complain to the Office of the Privacy Commissioner of Canada.
If something goes wrong
If information is lost or exposed in a way that creates a real risk of significant harm, we will notify the people affected and the Privacy Commissioner as the law requires, and say plainly what happened.
Changes to this policy
If we change what we collect or why, we will update this page and change the date at the top. Material changes will be announced on the site before they take effect.
Contact
Questions about privacy, or a request about your information: