YourPHR

Privacy Policy

Last updated: 11 June 2026

What data YourPHR handles, and where it lives

When you self-host YourPHR, everything it processes — imported FHIR records, uploaded documents, your account, and any provider credentials or tokens — stays entirely within your own deployment. By default the database is encrypted at rest. The application does not “phone home,” send telemetry, or transmit your data to the project or any third party. As the operator, you control storage, backups, encryption, retention, and access.

Connecting a healthcare provider (SMART on FHIR)

You may choose to connect a provider or patient-access API to import your records. When you do:

• You authenticate directly with your provider and authorize YourPHR to read your own records. YourPHR requests read-only access and never writes to your provider.
• The records retrieved are delivered to your instance, where they are displayed to you and stored locally. They are not routed through, copied to, or visible to the YourPHR project.
• Access and refresh tokens are stored encrypted on your own instance and used only to fetch your records. You can disconnect a provider, which removes its stored credentials, at any time.

The sign-in relay

Because a self-hosted instance is often not reachable from the public internet, completing a provider sign-in uses a small public relay. The relay receives only the short-lived authorization code returned by your provider, keyed by an opaque one-time value, holds it in memory for roughly 60 seconds, and deletes it once your instance retrieves it. The relay never receives access or refresh tokens and never sees any health data; your instance exchanges the code for tokens directly with the provider.

How your data is used

Within your instance, your records are used for one purpose: to display and organize your own health information for you. YourPHR does not use your data for advertising, profiling, analytics, model training, or sale, and it shares your data with no one.

Your control and deletion

You are in control of your data at all times. You can delete individual records, disconnect a provider, or remove your YourPHR instance entirely — doing so deletes the associated data from the only place it lives. Because the project holds no copy of your data, there is nothing for us to delete on your behalf.

This website (yourphr.org)

This is a static informational site hosted on GitHub Pages. It sets no cookies and runs no analytics or third-party trackers. GitHub may log standard request metadata (such as IP address) to serve the page; see GitHub's privacy documentation. This website never collects health information.

If you operate an instance for others

If you run a YourPHR instance that other people use, you act as the operator/controller of that deployment and are responsible for those users' privacy and for any applicable regulations (for example HIPAA or GDPR). This policy describes the software's behaviour, not a service operated by the project.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and published at this URL.

Contact

Questions about privacy or the project: open an issue on GitHub.