Privacy Policy
Effective Date: May 20, 2025
This Privacy Policy describes how SymPedia (a DBA of VerifyMD Inc., based in Merrill, WI, USA)
collects, uses, shares, and protects information when you use our website, mobile application, and services
(collectively, the “Service”).
By using SymPedia, you agree to the practices described in this Privacy Policy.
1. Who We Are
SymPedia is a medical reference and reporting platform operated by VerifyMD Inc..
We provide information about drugs, medical devices, and related safety data through web
and mobile applications. SymPedia is not a healthcare provider and does not provide medical advice.
2. Information We Collect
a. Account Information
We collect an email address and password to create and manage your account.
No additional personal profile information is required.
b. Payment Information
If you choose a Premium Plan, we collect limited billing information necessary
to process subscriptions or purchases. Full payment card numbers are not stored
on our servers.
c. Device & Technical Information
We collect limited technical data such as device type, operating system,
app version, and diagnostic or crash information to maintain, secure,
and improve the Service.
d. Usage Analytics & Telemetry
SymPedia uses first-party analytics and telemetry to understand feature usage and to improve
reliability, performance, and usability. Telemetry is collected in aggregated form and is
measured in monthly periods.
Telemetry may include:
- Screen or feature identifiers
- Interaction events (for example: viewing a report, adding/removing a favorite,
and adding/removing an item in a medication cabinet feature) - Timestamps
- Application version and operating system (for example: iOS, Android, Web)
- Report identifiers (UUIDs) used only to count how often specific content is viewed or saved
SymPedia may also record optional demographic categories to understand usage trends across groups.
These values are recorded as broad categories (such as banded age and banded weight), and are only used for
aggregated analytics (not individualized profiling). Demographic categories may include:
- Sex (male/female/unknown)
- Age (banded ranges)
- Weight (banded ranges)
- Race (broad categories)
- Ethnicity (broad categories)
We do not collect the content of searches, user-entered medical information, or personally identifiable
health data through analytics or telemetry.
Telemetry is used solely for operational, security, and product improvement purposes and is not used for
advertising profiling.
e. Advertising (Free Accounts Only)
Free accounts may receive advertisements delivered through third-party advertising services.
These services may collect device identifiers, ad interaction data, and coarse location information.
Users may control personalized advertising preferences through their device settings.
3. What We Do Not Collect
- We do not collect or store personal medical records.
- We do not collect precise location data.
- We do not sell or rent personal account information.
- User-saved content (such as bookmarks, favorites, or local notes) is encrypted and stored locally on the
user’s device unless explicitly shared. - We do not collect user-entered symptom notes, medical history, or other personal health narratives as part
of telemetry or analytics.
4. Adverse Event Reports
Users may voluntarily submit adverse event information related to medical products.
These submissions:
- Do not require names or contact details
- Are de-identified prior to analysis
- Are aggregated with other reports
De-identified and aggregated adverse event data may be analyzed, published,
shared with regulators, or sold to third parties such as research institutions,
healthcare analytics organizations, or regulatory data purchasers.
By submitting an adverse event report, you consent to the use of your non-identifiable
information for these purposes.
5. How We Use Information
- To provide and maintain the Service
- To manage accounts and subscriptions
- To process payments
- To improve features, performance, and reliability
- To detect abuse, fraud, or security issues
- To comply with legal obligations
6. Legal Bases (for EEA Users)
Where applicable, processing is based on:
- Performance of a contract
- User consent (analytics, advertising)
- Legitimate interests (security, reliability)
- Legal obligations
7. Sharing Information
We do not sell personal account data. Information may be shared with:
- Service providers supporting subscription billing and account management
- Advertising providers (Free accounts only)
- Service providers supporting analytics and infrastructure
- Regulatory or public health authorities where required
- Third parties receiving aggregated, de-identified adverse event data
8. Data Retention
Telemetry and diagnostic data is retained only for the period necessary to analyze trends and improve the
Service, after which it is deleted or further aggregated. Account data is retained until account deletion
or as required by law.
9. Data Security
- Passwords are stored using industry-standard hashing techniques.
- User data stored on the device is encrypted.
- Secure transport (HTTPS/TLS) is used for data transmission.
10. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access or correct your information
- Delete your account
- Withdraw consent
- Opt out of non-essential analytics
- Control advertising preferences
- Request a copy of your data
Analytics controls are available within the app’s privacy settings. If you choose to limit analytics,
SymPedia will continue to collect only basic interaction counts (for example: report views, favorites,
and medication cabinet add/remove actions) and the operating system category used to improve reliability
and measure feature usage. In this mode, SymPedia will not collect demographic breakdown analytics such as
sex, age band, weight band, race, or ethnicity. Certain limited data may still be processed for security,
fraud prevention, and service reliability.
11. Children’s Privacy
The Service is not intended for individuals under 18 years of age.
We do not knowingly collect personal data from minors.
12. International Transfers
Information may be processed in the United States.
Where required, appropriate safeguards are applied.
13. Changes to This Policy
We may update this Privacy Policy periodically.
Updates will be reflected by the effective date above.
14. Contact Us
SymPedia (a DBA of VerifyMD Inc.)
Email: [email protected]
Address: Merrill, WI, USA