Your health data is the most sensitive information you own. Here is exactly how we handle it, in plain language, without legal obscurity.
Encrypted and Protected · Patient-Controlled
Last updated: May 2026 · Version 1.0
Privacy Policy
The short version: You own your health data. We never sell it. You can delete it at any time. We only share it with who you tell us to share it with.
Who We Are
Sanari Health Inc. is a Canadian health technology company headquartered in Toronto, Ontario. Our platform gives patients full control over their health records and generates AI-powered clinical briefs for sharing with healthcare providers.
For privacy enquiries: privacy@sanarihealth.com
What Information We Collect
Account information: Name, email address, date of birth, and province of residence.
Health information you enter: Medications, supplements, holistic treatments, specialist relationships, lab results, and health history you choose to record.
Imported health records: Records you import from MyHealth Ontario or upload directly (PDF, lab results, etc.).
Usage data: How you interact with the platform (pages visited, features used) - never linked to your health data.
How We Use Your Information
To generate your AI-powered clinical brief for sharing with providers you choose.
To surface medication interactions and contraindication alerts relevant to your profile.
To maintain and improve the Sanari Health platform. You remain in control of your data at all times.
We do not use your health data to train AI models without explicit opt-in consent.
We do not sell, rent, or share your health data with advertisers, insurers, or employers.
How We Share Your Information
Your health data is shared only in the following circumstances:
With providers you choose: When you generate a shareable link or PDF, that content is accessible to whoever you share it with. Links can be time-limited and revoked.
With service providers: We may use third-party processors for platform operation. All processors are bound by data processing agreements.
As required by law: We will comply with lawful court orders and legal obligations under Ontario and Canadian law.
Data Retention
Your health record is retained for as long as your account is active. You may delete your account and all associated data at any time from within the platform. Deletion is permanent and irreversible. We retain anonymized usage analytics for platform improvement.
Your Rights
Access: Request a full export of your data at any time.
Correction: Update or correct any information in your record.
Deletion: Delete your account and all health data permanently.
Withdrawal: Revoke any sharing link at any time.
Complaint: File a complaint with the Office of the Information and Privacy Commissioner of Ontario (IPC) if you believe your privacy rights have been violated.
How your data is protected
Patient as Controller
Sanari operates on a patient-controlled model. You pull in your own records, enter your own data, and decide who sees it. Sanari acts on your instructions to store, organize, and share your information. Sanari is not a healthcare provider and does not hold records on providers' behalf. Because you direct everything yourself, Sanari is a service provided directly to you. Your data is encrypted and protected, it is never used beyond the features you choose, and it is never shared without your explicit action.
Consent Framework
Collection consent: Patients provide explicit informed consent at account creation for all data collection.
Sharing consent: Every share event is initiated by the patient - Sanari never proactively sends health information to providers without patient action.
Withdrawal of consent: Patients can revoke any shared link or delete their entire record at any time.
Data Security
All personal health information is encrypted at rest and in transit. We take technical and organizational measures to protect your data from unauthorized access or disclosure.
Security Safeguards
Encryption at rest (AES-256) and in transit (TLS 1.3)
Multi-factor authentication required for all accounts
Role-based access controls for all internal staff
SOC 2 Type II certification in progress
Biometric authentication on mobile applications
Regular third-party security audits
Breach Notification
In the event of a privacy breach involving personal health information, Sanari Health will notify affected individuals as required by law and as quickly as circumstances allow.
Privacy Officer
Sanari Health has designated a Privacy Officer responsible for compliance oversight. Contact: privacy@sanarihealth.com
Data Practices
AI & Machine Learning
Sanari Health uses AI to generate clinical briefs from your health record. The AI output is presented as a patient-prepared summary - not a clinical diagnosis or medical recommendation. Clinical judgment remains entirely with your healthcare providers.
Your individual health data is never used to train AI models without explicit opt-in consent. Model training uses only anonymized, aggregated, and consented data.
Third-Party Integrations
MyHealth Ontario: Patients import their own OHIP records via patient-initiated export. Sanari does not have direct API access to provincial health records.
Pharmacy integrations: Where available, pharmacy history is imported via patient consent and authorization with the pharmacy chain.
Lab systems: Patients may upload lab result PDFs directly. Direct lab system integration is in development.
Cookies & Analytics
Sanari Health uses minimal, privacy-respecting analytics (no third-party advertising trackers). We use session cookies for authentication only. We do not use cookies to track you across other websites.
Terms of Use
Important: Sanari Health is a patient information tool. It is not a medical device. AI-generated briefs are patient-prepared summaries and do not constitute medical advice, diagnosis, or treatment recommendations.
Acceptable Use
Sanari Health is intended for personal health record management and sharing with your own healthcare providers.
You must be 18 years of age or older to create an account, or have parental/guardian consent.
You are responsible for the accuracy of information you enter into your record.
You may not use Sanari Health to store or share health information belonging to another person without their explicit consent.
Limitation of Liability
Sanari Health provides a health information management tool. We are not liable for clinical decisions made by healthcare providers on the basis of information in a Sanari brief. Providers retain full clinical responsibility for their decisions.
Sanari Health AI outputs are patient-summarized information, not clinical assessments. They should be reviewed by a qualified healthcare provider in the context of a clinical consultation.
Intellectual Property
Your health data belongs to you. The Sanari Health platform, AI models, and interface design are the intellectual property of Sanari Health Inc. and may not be reproduced or reverse-engineered.
Governing Law
These terms are governed by the laws of the Province of Ontario and the laws of Canada applicable therein. Any disputes will be resolved in the courts of Ontario.
Changes to These Terms
We will notify you by email of any material changes to these terms at least 30 days before they take effect. Continued use of the platform after that date constitutes acceptance.
Contact
For privacy enquiries, data access or deletion requests, or to reach our Privacy Officer:
Email: privacy@sanarihealth.com
General: hello@sanarihealth.com
Address: Sanari Health Inc., Toronto, Ontario, Canada
For complaints to the Ontario privacy regulator: ipc.on.ca