Data & Privacy

Key Security Features

MedAdvisor is deeply committed to safeguarding customer information through a robust and comprehensive information security program. Our Information Security Management System is ISO 27001-certified, meeting the highest global standards for information security. Recognizing the critical importance of protecting health information, we have built our program on the stringent frameworks of the Australian Privacy Principles, the Health Insurance Portability and Accountability Act (HIPAA), and the General Data Protection Regulation (GDPR).

Data Privacy

MedAdvisor employs a “Privacy by Design” framework across all system development and deployment to ensure full integration of privacy requirements, including data minimization and anonymization where feasible.

Data Sharing

As part of MedAdvisor’s mission to simplify medication management and improve health outcomes, aggregated and anonymized data may be shared with third parties. For example, to enable patients to receive communications about the medications they have been prescribed.

Data Encryption

All data is encrypted using 256-AES encryption, one of the strongest block ciphers available.

Data Availability

MedAdvisor’s platform is hosted within your region and all data is continuously replicated across multiple availability zones to ensure maximum availability of services.

MedAdvisor uses data in a fair and lawful way, as expressly authorized by our terms and conditions and where the patient provides their consent. We also analyze aggregated and anonymized data to help improve health outcomes for people around the world, including to enable communications with patients about their prescribed medications. Aggregate data analysis enables us to provide programs which directly benefit pharmacies and patients.

We use aggregated and anonymized data to improve medication adherence and health outcomes for people around the world.

As part of MedAdvisor’s commitment to maintain compliance with HIPAA, GDPR, and the APP, all access to customer data is maintained in accordance with least privilege. Only the MedAdvisor employees and approved third party users with a valid business need are granted access and only for the limited purpose and period of time needed for the business use. MedAdvisor performs privacy impact assessments and regularly audits access records to ensure that access is lawful and strictly limited to least privilege at all times.

Yes, as part of maintaining our ISO 27001 certification, our Information Security Management System, inclusive of all information security controls related to the delivery of MedAdvisor Services undergoes an independent audit on a minimum annual basis. We also test for system vulnerabilities through periodic third party penetration testing.

We protect your health data

Key Security Features

Data Privacy

Data Sharing

Data Encryption

Data Availability

Committed to security and compliance

Frequently Asked Questions

How do you use the data shared with MedAdvisor?

How does my data help other people?

Who can access my data?

Are you independently audited?

Privacy Policy & Data Information

Privacy Policy

Customer Data

Pharmacy Data

Have a Question?