Privacy policy

Who we are

MediSync is a healthcare discovery and booking service in Pakistan. It helps you compare lab test prices, book lab tests and doctor appointments, manage family members, receive reports, and coordinate voluntary blood donation through Blood Connect.

To be confirmed by MediSync legal: registered company name, address, and the person responsible for data protection.

Information we collect

• Account: your mobile number, used to sign in with a one-time code, and the profile details you choose to add.
• Family Circle: details of children or dependents you add, and adult family members who accept your invitation.
• Lab orders: the tests and lab you choose, the patient name and phone for the order, and your address and time when you request home collection.
• Reports: the PDF report your lab uploads for your order.
• Appointments: the doctor, time, and visit type you book, and any optional pre-appointment questions you answer.
• Blood Connect: blood requests you create, donor profile and availability details, and your responses to requests.
• Technical information: session cookies needed to keep you signed in, and security records such as sign-in attempts.

MediSync does not use advertising or analytics trackers on its website.

Who can see your information

• The lab you book: sees the order, patient name and phone, and the collection address when you choose home collection.
• The phlebotomist assigned by the lab: sees only the home collections assigned to them, with the details needed to reach you.
• The doctor you book: sees your appointment and, if you choose to answer them, your pre-appointment answers.
• Family members: see only what the access level you set allows. Adults must accept an invitation before anyone can manage bookings for them.
• Blood Connect: a coordinator contact is shared with a donor only after the donor chooses to respond. A donor's personal phone number is not shown to the requester.
• MediSync support staff: can look up bookings to help you, and every cancellation they make is recorded. They cannot open your report files or your pre-appointment answers.

We do not sell your information.

How we protect it

• One-time sign-in codes are stored only in scrambled (hashed) form and expire after a few minutes.
• Lab reports are stored privately and can be downloaded only from the patient's own account.
• Pre-appointment answers are stored encrypted.
• Private pages and data are not saved in your browser's offline cache.
• Card details are never stored by MediSync. Lab orders on the website are currently paid in cash at collection.

How long we keep it

To be confirmed by MediSync legal: retention periods for accounts, orders, reports, appointments, and Blood Connect records.

Your choices and rights

You can update your profile and Family Circle, withdraw from a waitlist, cancel eligible bookings, and close Blood Connect requests from your account.

To be confirmed by MediSync legal: how to request a copy or deletion of your data, response times, and the law that applies.

Contact

For privacy questions, use the details on our contact and support page.