— PRIVACY & SECURITY
Your health data
belongs to you.
Not to us.
This page exists because you should know exactly what happens to your information. Plain statements about what Syncara does and does not do.
— PRIVACY & SECURITY
Your health data
belongs to you.
Not to us.
This page exists because you should know exactly what happens to your information. Plain statements about what Syncara does and does not do.
— SYNCARA'S DATA COMMITMENTS
No advertising
No advertising
No data sharing
Full export and permanent deletion
Built to PIPEDA & PHIPA
We do not sell your data — ever
No data sharing
Full export and permanent deletion
Built to PIPEDA & PHIPA
We do not sell your data — ever
— THREE COMMITMENTS
The three things that
define how we handle your data.
— THREE COMMITMENTS
The three things that
define how we handle your data.
Your data. Protected.
All Syncara data is stored securely using industry-standard encryption.
Your data. Protected.
All Syncara data is stored securely using industry-standard encryption.
No advertising or data sharing.
Syncara does not share your health information any third-party.
No advertising or data sharing.
Syncara does not share your health information any third-party.
You control everything.
You have full patient control over your personal health records.
You control everything.
You have full patient control over your personal health records.
— STAFF ACCESS
What Syncara staff
can and cannot access.
— STAFF ACCESS
What Syncara staff
can and cannot access.
✅ MAINTENANCE & INFRASTRUCTURE
Engineers who manage Syncara's infrastructure have access to system-level data for maintaining availability and security. This access is logged, controlled, and audited.
✅ MAINTENANCE & INFRASTRUCTURE
Engineers who manage Syncara's infrastructure have access to system-level data for maintaining availability and security. This access is logged, controlled, and audited.
✅ CUSTOMER SUPPORT
If you contact Syncara support with a question about your account or record, a support team member may access your account to help resolve the issue. This only happens when you initiate contact and request help.
✅ CUSTOMER SUPPORT
If you contact Syncara support with a question about your account or record, a support team member may access your account to help resolve the issue. This only happens when you initiate contact and request help.
❌ REVIEW OF YOUR DATA
Syncara staff do not read your health records as part of normal operations. No one is reviewing your medical history looks like.
❌ REVIEW OF YOUR DATA
Syncara staff do not read your health records as part of normal operations. No one is reviewing your medical history looks like.
❌ SHARING YOUR DATA
No Syncara employee is authorized to share, transmit, or discuss your health data with any party outside of Syncara, not with researchers, not with insurers.
❌ SHARING YOUR DATA
No Syncara employee is authorized to share, transmit, or discuss your health data with any party outside of Syncara, not with researchers, not with insurers.
❌ ACCESS TO YOUR DETAILS
Syncara staff cannot access your credentials or your full payment card details. Payment processing is handled by a PCI-compliant third-party processor.
❌ ACCESS TO YOUR DETAILS
Syncara staff cannot access your credentials or your full payment card details. Payment processing is handled by a PCI-compliant third-party processor.
— DATA STORAGE & PROTECTION
Where your data lives
and how it's protected.
— DATA STORAGE & PROTECTION
Where your data lives
and how it's protected.
Encryption at rest and in transit
All data is encrypted at rest in the database and encrypted in transit using TLS 1.2 or higher. Your records are never transmitted or stored in plain text.
Encryption at rest and in transit
All data is encrypted at rest in the database and encrypted in transit using TLS 1.2 or higher. Your records are never transmitted or stored in plain text.
PIPEDA and PHIPA
Syncara is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the principles of the Personal Health Information Protection Act (PHIPA) applicable to personal health records.
PIPEDA and PHIPA
Syncara is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the principles of the Personal Health Information Protection Act (PHIPA) applicable to personal health records.
Access controls
Follows a zero-trust model with strict least privilege access policies. Multi-factor authentication (MFA) is enforced for administrative access (e.g., AWS)
Access controls
Follows a zero-trust model with strict least privilege access policies. Multi-factor authentication (MFA) is enforced for administrative access (e.g., AWS)
System Monitoring
Audit logs track every access event or system change. Alerts and Web Application Firewalls (WAF) protect all public endpoints.
System Monitoring
Audit logs track every access event or system change. Alerts and Web Application Firewalls (WAF) protect all public endpoints.
PCI-compliant payment processing
Payment information is processed by a PCI DSS-compliant third-party processor. Syncara never sees, stores, or handles full card numbers. Your billing details live outside our systems entirely.
PCI-compliant payment processing
Payment information is processed by a PCI DSS-compliant third-party processor. Syncara never sees, stores, or handles full card numbers. Your billing details live outside our systems entirely.
— GET IN TOUCH
Still have questions?
Privacy questions about health data deserve a direct answer. Send us a question and a member of the Syncara team responds personally.
— GET IN TOUCH
Still have questions?
Your complete health record record waits,
exactly as you left it,
until the moment it's needed.
Contact Us
Contact Us
or contact us directly: support@syncara.ca
— BE READY
A health record that works
for you.
— BE READY
A health record that works
for you.
30 days free · No credit card · Read-only after trial · Cancel anytime
30 days free · No credit card · Read-only after trial · Cancel anytime