Skip to main content

Privacy-first healthcare, designed for Pakistan

Join the provider network
Privacy notice

Your identity and health data are not marketplace inventory.

This notice explains HealthArena's intended data practices as features are released. It applies to the website, accounts and HealthArena services that explicitly link to it. Effective 26 August 2026.

01

Data we may collect

  • Account and contact details you provide.
  • Sensitive health information only when needed for an activated care workflow and with an appropriate consent or legal basis.
  • Provider credentials and facility licensing evidence.
  • Security, device and audit information needed to protect the service.
02

Alias-first patient identity

  • A private patient record receives a non-identifying care alias.
  • Legal identity, contact details and address are separated at higher permission levels.
  • Patients can choose anonymous, first-name-only or full-identity visibility where the care setting permits it.
03

Location and nearby search

  • Browser location is requested only after you press Near me.
  • The submitted coordinates are used to calculate straight-line distance and are not written to the patient profile or search history by the nearby-search endpoint.
  • You can always search by city instead.
04

Sharing and temporary access

  • Information is shared with the provider or partner you choose only for the relevant service.
  • Planned temporary access grants will have purpose, scope, expiry and revocation controls with an audit trail.
  • HealthArena does not sell personal or health data.
05

Retention, protection and rights

  • Records are retained only as needed for the service, security and applicable legal or clinical obligations.
  • You may request access, correction, consent withdrawal or deletion where retention is not legally required.
  • No internet service can promise absolute security; suspected incidents are investigated and handled under applicable requirements.
06

Children and emergencies

  • A parent or lawful guardian must manage a child's account and consent.
  • Emergency identity disclosure is never automatic; it requires an allowed setting, documented reason and audit event.
  • Do not rely on HealthArena for emergency response.