Last Updated: September 2, 2026
At Midi Health, we understand that privacy is especially important when you are seeking healthcare. This Privacy Policy explains how Midi Health, Inc. and its subsidiaries and affiliated entities (“Midi,” “we,” “us,” or “our”) collect, use, maintain, protect, and disclose personal information when you use our websites, online platforms, applications, products, and services.
This Privacy Policy should be read together with our Terms and Conditions and other applicable privacy notices.
By accessing or using Midi services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use our services.
1. Information This Privacy Policy Covers
This Privacy Policy applies to personal information collected through Midi’s websites, applications, platforms, and other services covered by this policy.
“Personal Data” means information that identifies you or can reasonably be associated with you.
Depending on how you interact with Midi, the information we collect may include contact information, account information, health-related information, payment information, device information, usage information, and other information described below.
Certain health information may be subject to additional protections under federal or state law.
2. Protected Health Information
When you receive healthcare services through a Medical Group or healthcare provider affiliated with Midi, certain medical information may be protected health information under HIPAA or other applicable healthcare privacy laws.
The Medical Groups that provide healthcare services through the Midi platform maintain a separate Notice of Privacy Practices explaining how protected health information may be used and disclosed and describing your rights regarding that information.
Midi’s current legal terms explain that Midi itself is not generally a HIPAA covered entity, although Midi may act as a business associate in certain circumstances. Whether particular information is protected by HIPAA depends on the nature of the information, the entity handling it, and applicable law.
If this Privacy Policy conflicts with applicable HIPAA requirements or a Medical Group’s Notice of Privacy Practices, the applicable legal requirements and Notice of Privacy Practices will control with respect to protected health information.
3. Information We Collect
The information we collect depends on how you use our services, the services you request, your choices, your location, and applicable law.
Information You Provide Directly
You may provide information when you:
- Create an account
- Complete an intake questionnaire
- Schedule an appointment
- Communicate with our team
- Meet with a healthcare provider
- Purchase products or services
- Complete forms
- Contact customer support
- Participate in surveys or research
- Subscribe to communications
- Submit feedback
- Request information about our services
This information may include:
- Name
- Email address
- Telephone number
- Mailing or shipping address
- Date of birth
- Account credentials
- Insurance information
- Payment information
- Health-related information
- Symptoms and health concerns
- Medical history
- Medications
- Treatment information
- Appointment information
- Information about your healthcare goals
- Other information you choose to provide
4. Health and Consumer Health Information
Because Midi provides women’s healthcare services, some information collected through our services may relate to health or healthcare.
Depending on applicable law, this may include information about:
- Symptoms
- Medical conditions
- Diagnoses
- Treatments
- Medications
- Procedures
- Testing
- Health measurements
- Sexual or reproductive health
- Menopause and perimenopause
- Weight and metabolic health
- Sleep
- Mood and memory
- Other health-related concerns
Certain state privacy laws may provide additional protections for consumer health data.
Midi’s current Consumer Health Data Privacy Policy explains that consumer health data may include information about health conditions, symptoms, diagnoses, testing, treatment, medications, bodily measurements, precise location information related to seeking healthcare, and information from which health-related information may be inferred.
5. Information We Collect Automatically
When you access our website or use our services, we may automatically collect certain information about your device and interaction with our services.
This may include:
- IP address
- Browser type
- Device type
- Operating system
- Pages viewed
- Features used
- Dates and times of activity
- Referring websites
- General location information
- Device identifiers
- Website interaction information
- Technical and diagnostic information
We may collect this information through cookies, pixels, tags, analytics tools, log files, and similar technologies.
6. Cookies and Similar Technologies
Midi may use cookies and similar technologies to operate, secure, analyze, and improve our websites and services.
These technologies may help us:
- Keep our services functioning properly
- Remember preferences
- Understand how visitors use our website
- Measure website performance
- Improve user experience
- Maintain security
- Analyze marketing effectiveness
- Personalize certain experiences where permitted
Depending on your location and applicable law, you may have choices regarding certain cookies and tracking technologies.
Your browser may also provide controls for managing cookies.
7. Information We Receive From Other Sources
We may receive information about you from third parties when permitted by law.
These sources may include:
- Healthcare providers
- Medical groups
- Pharmacies
- Laboratories
- Insurance providers
- Service providers
- Business partners
- Authentication providers
- Advertising or analytics partners
- Publicly available sources
The information received depends on the relationship and the services involved.
8. How We Use Personal Information
We may use personal information for purposes permitted by applicable law, including to:
Provide Services
We use information to provide, maintain, and support the services you request.
This may include scheduling appointments, facilitating healthcare services, coordinating prescriptions or laboratory services, processing transactions, and communicating with you.
Personalize Your Experience
We may use information to understand your preferences and provide a more relevant experience.
Communicate With You
We may contact you about appointments, account activity, service updates, support requests, transactions, and other information related to your use of Midi.
Where required by law, we will obtain appropriate consent before sending certain marketing communications.
Improve Our Services
We may analyze information to understand how our services are being used and identify ways to improve our technology, products, healthcare experience, and operations.
Maintain Security
We may use information to detect, investigate, prevent, and respond to fraud, abuse, security incidents, and other potentially harmful activity.
Conduct Research and Development
Where permitted by law, we may use information to evaluate and improve our services, technology, clinical workflows, and products.
Where appropriate, information may be de-identified, aggregated, or otherwise processed to reduce its association with individual users.
Meet Legal Requirements
We may use or disclose information when necessary to comply with applicable laws, regulations, legal processes, court orders, or governmental requests.
9. How We Share Personal Information
We may share personal information when permitted or required by law and when reasonably necessary to provide or support the services you request.
Depending on the circumstances, information may be shared with categories of recipients such as:
- Medical Groups
- Healthcare providers
- Pharmacies
- Laboratories
- Payment processors
- Technology providers
- Hosting and security providers
- Customer support providers
- Analytics providers
- Business partners
- Professional advisors
- Government authorities
- Law enforcement when legally required
We may also share information when you instruct or authorize us to do so.
Midi’s current Privacy Policy states that consumer health data may be shared as reasonably necessary to provide requested services, support transactions, maintain services, meet legal obligations, and for other purposes where applicable consent or legal authorization exists.
10. Medical Groups and Healthcare Providers
Healthcare services available through Midi may be provided by independent Medical Groups and healthcare professionals.
These providers may collect and maintain health information as part of providing medical care.
Their use and disclosure of protected health information are governed by applicable healthcare privacy laws and their Notice of Privacy Practices.
The Medical Groups’ current notice states that protected health information may be used or disclosed for treatment, payment, healthcare operations, and other purposes permitted or required by law.
11. Consumer Health Data
Certain state laws provide additional rights concerning consumer health data.
Consumer health data may include information about health conditions, symptoms, diagnoses, medications, treatments, procedures, bodily measurements, healthcare-seeking activity, and information that can reasonably be used to infer health-related information.
We may collect this information directly from you, through your interactions with our services, from third parties, or from other permitted sources.
We use consumer health data primarily as reasonably necessary to provide requested services, operate our platform, maintain security, troubleshoot issues, improve our services, conduct permitted research and development, and meet legal obligations.
Where required by applicable law, we will provide additional choices or obtain consent before using consumer health data for certain purposes.
12. Marketing and Advertising
Depending on applicable law and your choices, Midi may use certain information for marketing, advertising, or promotional purposes.
We may use information to understand the effectiveness of our marketing activities and to provide information about Midi services that may be relevant to you.
We will provide required notices and choices where applicable.
You may unsubscribe from certain promotional communications by following the instructions included in the communication.
Please note that opting out of marketing communications does not necessarily stop service-related communications.
13. Text Messages and Communications
If you provide your telephone number and provide any required consent, Midi may communicate with you by text message.
Messages may relate to appointments, account activity, service updates, support, or other healthcare-related communications.
Message and data rates may apply according to your mobile carrier.
You may have options to stop certain text communications depending on the type of message and applicable law.
14. Artificial Intelligence and Automated Technologies
Midi may use technology, including artificial intelligence and automated tools, to support certain business, technology, administrative, and clinical workflows.
For example, Midi currently uses an AI-supported clinical note-taking tool that can listen to a medical consultation and generate a written summary for the clinician. The clinician reviews and updates the note as necessary before approving it.
Where these technologies process personal or health information, Midi applies appropriate privacy and security requirements based on the applicable service, relationship, and law.
AI-supported tools do not replace the professional judgment of your healthcare provider.
15. How We Protect Personal Information
Midi takes reasonable measures designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction.
Security measures may include technical, administrative, and organizational safeguards.
However, no website, electronic communication system, storage system, or internet transmission can be guaranteed to be completely secure.
You should also take reasonable steps to protect your account credentials and devices.
If you believe your account or personal information has been compromised, contact us as soon as possible.
16. Payment Information
When you pay for services or products, payment information may be processed through appropriate payment systems and service providers.
Midi takes steps designed to protect payment information and may use encryption and other security measures.
Your payment information may also be subject to the terms and privacy practices of the payment processor involved.
17. How Long We Keep Information
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and protect our services.
Retention periods vary depending on the type of information and the purpose for which it was collected.
Healthcare records may be retained for periods required by applicable healthcare laws and regulations.
18. Your Privacy Choices
Depending on where you live and applicable law, you may have choices regarding your personal information.
These may include the ability to:
- Request access to certain personal information
- Request correction of inaccurate information
- Request deletion of certain information
- Request information about how your data is used
- Opt out of certain marketing communications
- Manage certain cookie preferences
- Withdraw certain consents
- Exercise additional state privacy rights
Not every right is available in every circumstance.
Some information may need to be retained because of legal, healthcare, security, or other legitimate requirements.
19. State Privacy Rights
Certain U.S. states provide residents with additional privacy rights.
Depending on your state, these rights may include:
- Right to know what personal information is collected
- Right to access personal information
- Right to correct inaccurate information
- Right to delete certain personal information
- Right to obtain information about disclosures
- Right to opt out of certain sales or sharing activities
- Right to opt out of certain targeted advertising
- Right to limit certain uses of sensitive personal information
- Right to appeal a privacy-rights decision where applicable
The availability and scope of these rights depend on applicable state law.
20. How to Exercise Your Privacy Rights
If you want to exercise a privacy right available to you, please contact Midi using the privacy contact information provided below.
We may need to verify your identity before completing certain requests.
This verification helps protect personal information and prevent unauthorized access.
If we cannot fulfill a request, we will explain the reason when required by applicable law.
Where applicable, you may have the right to appeal a decision regarding your privacy request.
21. Children’s Privacy
Midi’s services are not intended for children under 18.
We do not knowingly collect personal information from individuals under 18 through the services.
If we learn that we have collected personal information from a child under 18, we will take appropriate steps to delete the information as required by applicable law.
If you believe a child has provided personal information through our services, please contact us.
22. Do Not Track
Some browsers provide a “Do Not Track” signal.
Because there is currently no universally accepted standard for responding to all such signals, our services may not respond to every browser-based Do Not Track setting.
Where required by applicable law, we will honor legally recognized privacy preference signals.
23. Third-Party Websites
Our website may contain links to websites, applications, or services operated by third parties.
Those services are not controlled by Midi.
If you follow a third-party link, that third party’s privacy policy and terms will apply to your interaction with its service.
We encourage you to review the privacy practices of third-party services before providing personal information.
24. Business Transfers
If Midi undergoes a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or other corporate transaction, personal information may be transferred as part of that transaction where permitted by law.
Any applicable privacy rights and obligations will continue to apply to the information as required by law.
25. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we may update the “Last Updated” date at the top of this page and post the revised policy.
If changes are material, we may provide additional notice when required by applicable law.
Your continued use of the services after an updated Privacy Policy becomes effective may constitute acceptance of the revised policy to the extent permitted by law.
26. Additional Healthcare Privacy Notice
The Medical Groups providing healthcare services through Midi maintain a separate Notice of Privacy Practices.
That notice explains:
- How protected health information may be used
- How protected health information may be disclosed
- Your rights regarding your medical information
- How to request access to your medical information
- How to request corrections
- How to submit a privacy complaint
- How applicable HIPAA protections apply
The current Medical Groups’ Notice states that protected health information will not be sold or commercially marketed and describes permitted and required disclosures under applicable law.
27. Privacy Complaints
We take privacy concerns seriously.
If you believe your privacy rights have been violated, please contact us so that we can review your concern.
If your concern involves protected health information handled by a Medical Group, you may also have the right to submit a complaint to the U.S. Department of Health and Human Services Office for Civil Rights.
You will not be retaliated against for filing a privacy complaint.
28. Contact Us
If you have questions about this Privacy Policy or how Midi handles personal information, please contact us.
Midi Health, Inc.
Privacy Contact: operations@joinmidi.com
For healthcare privacy matters involving protected health information, you may also contact the applicable Medical Group or its Privacy Officer.
29. Important Reminder
Your privacy matters to us.
Because Midi provides healthcare-related services, different privacy laws may apply depending on the type of information involved, the service you receive, the entity handling your information, and the state where you receive care.
This Privacy Policy explains Midi’s general privacy practices. It does not replace a Medical Group’s Notice of Privacy Practices or other legally required privacy notices.
If you have questions about how your medical information is used or disclosed, review the applicable Notice of Privacy Practices or contact the appropriate healthcare provider.
By using Midi’s services, you acknowledge that you have reviewed this Privacy Policy and understand how your information may be collected, used, and disclosed as described above.