Our Commitment to Data Protection

At Similia, we understand the sensitive nature of healthcare data. We are committed to protecting patient information and continuously improving our security practices to meet healthcare data protection standards.

Our platform is designed with privacy-by-default principles, ensuring your patient case notes and clinical data remain confidential and secure.

Security & Compliance Features

Data Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your patient information is protected with industry-standard encryption.

Secure Infrastructure

Hosted on enterprise-grade cloud infrastructure with ongoing internal security reviews and monitoring.

Access Controls

Role-based access controls ensure only authorized users can access patient data. Multi-factor authentication available.

Data Storage & Processing

Your case data is stored in secure, encrypted databases. We use Firebase with strict security rules ensuring data isolation between users. All API communications are encrypted using TLS 1.3.

Third-Party Services

AI-powered features require explicit consent and are processed by: OpenAI (US) for symptom analysis and photo analysis; Deepgram (US) for live audio transcription. We have signed Business Associate Agreements (BAAs) with both providers, ensuring HIPAA-compliant processing with zero data retention — no patient data is stored by these providers. Your data is never used to train AI models. These transfers are protected under the EU-US Data Privacy Framework, UK-US Data Bridge, and Standard Contractual Clauses.

Data Retention & Deletion

You maintain full control over your data. Case notes and patient information can be deleted at any time through your account settings. Account deletion triggers a complete server-side purge: user profile, all cases and subcollections, login sessions, case invitations, timeline data, email marketing contact, and authentication credentials are permanently removed.

International Users (GDPR)

For users in the European Economic Area, we comply with GDPR requirements. See our Privacy Policy for details on your rights regarding personal data access, rectification, and erasure.

HIPAA & GDPR Compliance