Privacy Policy

This policy explains how Meddy Health LLC (“Meddy,” “we,” “us”), a New York limited liability company, collects, uses, and shares information through the website getmeddyhealth.com and the Meddy mobile app. Meddy owns and operates the Meddy brand, website, app, and technology, and provides administrative services, such as scheduling and patient communications, to Sameer Aggarwal Medical PLLC (“the Medical Practice”).

Meddy does not practice medicine or provide medical care. All medical services are provided by the Medical Practice and its licensed clinicians. Meddy Health LLC and the Medical Practice are both owned by Dr. Sameer Aggarwal.

New York only. Medical services through Meddy are currently available only to people who are located in New York at the time of each consultation and visit.

This policy covers information that is not part of your medical care, such as website visits, account and contact details, and how we use cookies and send communications.

Your health information is covered by a different notice. Any health information you share with us, including the health goals, concerns, or measurements you provide when you request a free consultation, is protected health information of the Medical Practice from the moment you share it. The same applies to your records, appointments, messages, and data you log or share from devices once you are a patient. Meddy handles this information only on the Medical Practice’s behalf, as its business associate under HIPAA, to provide technology and administrative services such as scheduling, appointment reminders, and routing your messages to the Medical Practice’s clinicians. How that information is used and shared, and your rights over it, are described in the Medical Practice’s Notice of Privacy Practices. If this policy and that notice differ about your health information, the notice controls.

Health information you share when you request a consultation is not listed here because it is covered by the Medical Practice’s Notice of Privacy Practices, as described above. We do not collect biometric identifiers such as fingerprints, facial geometry, retina or iris scans, or voiceprints, or precise location information. We do not buy personal information from data brokers.

We use information only to:

• Create and manage your account, and let you use the website and app
• Respond to consultation requests and schedule your free consultation with the Medical Practice, on the Medical Practice’s behalf
• Send transactional messages, such as account notices, appointment confirmations and reminders, and security alerts
• Answer calls and texts, including through an automated assistant that uses artificial intelligence. It tells you at the start of each call that it is automated and that the call is recorded and transcribed.
• Provide support and respond to your requests, and route any health questions to the Medical Practice’s clinicians. Meddy staff and our automated assistant do not give medical advice.
• Keep the site and app secure, prevent fraud, and fix problems
• Understand how the site and app are used so we can improve them, using Contentsquare analytics on our public website pages if you accept analytics cookies
• Improve our services using de-identified information that cannot be used to identify you, including to develop and train our own analytics and artificial intelligence models
• Comply with the law and enforce our terms

We will not use your information for a new purpose without telling you first and, where required, getting your consent.

We do not sell your personal information, and we do not use or share health information for advertising. We do not place third-party advertising pixels, analytics, or session recording tools in the patient app or portal, or on pages where you request a consultation, book an appointment, or enter health information.

We share information only with:

We share information for any other purpose only with your consent.

We use essential cookies to keep you signed in, remember your settings, and protect the site and app. These are always on.

With your permission, we also use Contentsquare to understand how visitors use our public website pages, including which pages they view, where they click and scroll, and recordings of how they move through a page. When you first visit our website, we ask whether you accept analytics cookies and session recordings. Contentsquare does not run until you accept, and you can change your choice at any time through the cookie settings link at the bottom of our website.

When it runs, Contentsquare:

• runs only on public website pages, and never in the patient app or portal, or on pages where you request a consultation, book an appointment, or enter health information;
• does not record pages about medications or weight management;
• is configured to mask anything you type; and
• truncates IP addresses where the tool allows.

You can also block or delete cookies in your browser settings, though some features may not work without essential cookies. We honor Global Privacy Control signals by turning off any non-essential cookies for that browser.

Meddy sends transactional messages, including account, security, scheduling, and appointment notices, for itself and on behalf of the Medical Practice. These are part of the service. Reminders by text or email contain no clinical details.

• Text messages: reply STOP to opt out at any time. Message and data rates may apply. Consent to texts is not required to use the service or receive care. Calls and texts are handled through our phone provider, Sinch. Calls to our phone line may be answered by an automated assistant and are recorded and transcribed. Texts and email are not encrypted, so they never include clinical details.
• Marketing emails are sent only with your consent. Use the unsubscribe link in any marketing email to opt out. We never use your medical information for marketing without your written authorization.
• Push notifications can be turned off in your device settings.

For information covered by this policy, you can ask us to:

• Tell you what personal information we hold about you and give you a copy
• Correct inaccurate information
• Delete your information and close your account

Email support@getmeddyhealth.com with your request. We will verify your identity and respond within 30 days. We will not treat you differently for making a request.

Deleting your Meddy account does not delete medical records the Medical Practice must keep by law. To access, correct, or get copies of your health information, follow the Medical Practice’s Notice of Privacy Practices.

We protect information with encryption in transit and at rest, multi-factor authentication for administrators, access controls and logging, regular security updates, and encrypted backups, hosted on HIPAA-eligible cloud infrastructure. Meddy staff who handle patient information are trained on HIPAA and can access only what they need for their work. No system is completely secure, so please keep your login private and tell us right away if you think your account has been compromised.

If a security breach affects your personal information, we will notify you, and the authorities where required, as New York law and HIPAA require. For a breach involving health information, notice is given by or with the approval of the Medical Practice.

Meddy is for adults 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.

We will post any changes here with a new effective date, and notify you in the app or by email before material changes take effect. We will not use previously collected information in a materially new way without your consent.

Meddy Health LLC · 2248 Broadway #1071, New York, NY 10024 · support@getmeddyhealth.com

For questions about your medical records or health information, contact Sameer Aggarwal Medical PLLC at support@getmeddyhealth.com or 516-925-3997.