MediFirst Privacy Policy
Last updated: November 2026
MediFirst connects patients with doctors, pharmacies and laboratories. This policy explains what information the MediFirst apps and website (the "Service") collect, why, who sees it, and the choices you have. By using the Service you agree to this policy.
1. Information we collect
- Account details: your name, email address, phone number and password (stored securely, never in plain text). Doctors, pharmacies and laboratories also provide their licence number and licence document so we can verify them.
- Profile and health information you give us: date of birth, blood group, symptoms, appointments, consultation notes, prescriptions, lab bookings and results, medical records or photos you upload, and period-tracker entries.
- Messages and calls: chat messages with your doctor are stored so that you can read them. Audio and video calls run through our calling provider; MediFirst does not record calls and keeps only call timing.
- Location: if you allow it, your approximate location is used to show doctors, pharmacies and labs near you and to help in emergencies. You can turn this off in your phone settings.
- Payments: wallet top-ups are processed by Paystack. We do not see or store your card number. We keep a record of your wallet transactions.
- Files and pictures sent to MediAI: text, photos and PDFs you send to the MediAI assistant are sent to our AI provider to produce an answer.
- Device information: a push-notification token so we can send you reminders, and basic technical logs.
2. How we use your information
- To provide the Service: book and run consultations, process orders and lab tests, hold your wallet balance, and show your records in your Vault.
- To send reminders and updates (for example appointment, session and lab-result notifications).
- To keep the Service safe, prevent fraud and verify healthcare providers.
- To improve MediFirst. We do not sell your personal data and we do not use it for advertising.
3. Who can see your information
- Your doctor, pharmacy or laboratory can see what they need to treat you or fill your order, such as your name, the booking and the medicines or tests involved. A doctor sees only their own sessions with you unless you choose to share your wider history.
- Service providers that help us run MediFirst: our hosting provider; ZEGOCLOUD (audio and video calls); Paystack (payments); Expo, Apple and Google (push notifications); and our AI provider for MediAI. They receive only what is needed for their task.
- Authorities when the law requires it.
4. How long we keep it
We keep your information while your account is active. Medical, order and payment records may be kept for as long as the law requires, without your name once you delete your account.
5. Your choices and rights
- You can update your profile at any time in the app.
- You can control who sees your history in Settings → Privacy.
- You can delete your account in the app: Settings → Privacy → Delete Account (doctors, pharmacies and labs: Settings → Delete account). Your name, contact details, photo and licence are removed and you are signed out everywhere.
- To ask for a copy of your data or for any correction, email us at the address below.
6. Security
We use encrypted connections (HTTPS), hashed passwords and access controls. No system is perfectly secure, so please keep your password private.
7. Medical disclaimer
MediAI and the health tips in the Service give general information to help you understand health topics. They are not a diagnosis and do not replace a doctor. In an emergency call your local emergency number or use the Emergency feature in the app.
8. Children
The Service is intended for adults. A parent or guardian may use it for a child under their care.
9. Changes
We may update this policy. We will change the date above and, for important changes, tell you in the app.
10. Contact us
Questions or requests: support@medifirst.ng