Privacy policy

Your blood results are about as personal as information gets. This page says plainly what we collect, why, who touches it, and how to get it deleted.

Last updated 9 October 2026. Signal Health operates in Cape Town, South Africa, and processes personal information under the Protection of Personal Information Act, 2013 (POPIA).

What we collect

• Contact and booking details: your name, phone number, email address, and the home or office address where the nurse visits you.
• Health information: the blood sample and body measures you give us; the results of the tests you ordered; the doctor's review and recommendations. POPIA treats this as special personal information.
• Details for your visit and the laboratory: your ID or passport number, date of birth and sex at birth (the laboratory's request form needs them, and some markers are read against them), for women your cycle or menopause status, and access notes for your address. If you choose to give them: your GP's name and practice, an emergency contact, and a short note on medication or conditions, which only the reviewing doctor reads.
• A photo, only if you add one: so your nurse can recognise you at the door. We use it to make a personalised video for you only if you tick a separate box saying so. It is kept in our private database, is never published or shown on the website, and we delete it whenever you ask.
• Gifts: if someone buys a membership for you, we record their name and number, and the details they give us about you with your permission. You give your own consent to testing at your visit.
• Payment records: what you bought, the amount and a payment reference. Card details are entered on our payment partner's secure page. We never see or store your card number.
• Messages: emails, WhatsApp messages and website chat messages you send us.
• Basic website data: standard server logs such as IP address and browser type. We also use the Meta pixel to see which of our Facebook and Instagram adverts bring people to the site. It records page visits and when someone views the membership, opens the chat, presses Join, books or pays. It never receives your test results or anything you type in the chat. Our server tells Meta about the same steps directly (with your browser's IP address and type), and when a membership is paid for it adds the amount, plus your email and mobile number in scrambled, hashed form if we have them, so we can see which adverts lead to members; it never sends health details, ID numbers, your address or your onboarding answers. To count how far visitors from each advert get, this browser keeps a random visitor number and the name of the advert that brought it, in a cookie and in the browser's storage; it is not linked to your name. You can turn off ad measurement on this browser.

Why we use it

• To book and carry out your home visit.
• To test your sample, have a registered doctor review the results, and deliver your report.
• To answer your questions and look after your account or membership.
• To take payment and keep the financial records the law requires.
• To contact you if a result needs prompt clinical follow-up.

We process health information only with your explicit written consent, which you give on our consent form before any sample is taken. You can withdraw that consent at any time. We do not use your information for anything else, and we never sell it.

Who sees it

• Our clinical team: the registered nurse who visits you and the registered doctor who reviews your report, both bound by professional confidentiality.
• The laboratory that analyses your sample, which receives the sample and the minimum identifying details needed to match the result to you.
• Service providers that run our systems: Yoco (payments), Google and Resend (email), Meta (WhatsApp, and measuring our adverts), Railway (website and database hosting), and OpenRouter, DeepSeek and Anthropic (the AI models behind the assistant that answers website chat and WhatsApp messages). They process information on our instructions and may store it on servers outside South Africa, in countries with data protection laws or under agreements that protect it.
• Authorities, only where the law compels us.

Your employer, your medical scheme and your insurer receive nothing from us unless you ask us in writing to send it.

About our assistant

Questions on website chat and WhatsApp are answered first by an AI assistant, which will tell you so if you ask. It can explain the membership, take booking details and send a payment link. It does not see your test results and does not give medical advice. A person on our team can take over any conversation, and takes over automatically for complaints, anything about results, and emergencies. Please do not send medical history or results over chat.

How long we keep it

• Reports and the doctor's review: kept as health records for the period the Health Professions Council of South Africa requires, currently at least six years, unless you ask for earlier deletion and the law allows it.
• Blood samples: destroyed after testing and quality checks are complete. We do not bank samples.
• WhatsApp and chat conversations: deleted 90 days after your last message.
• Payment records: five years, as tax law requires.

How we protect it

Information travels over encrypted connections. Reports are shared only with you. Access is limited to the people who need it to serve you, and our database is not reachable from the public internet. If a breach ever affects your information, we will tell you and the Information Regulator as POPIA requires.

Your rights

You can ask us at any time to show you what we hold about you, correct it, delete it, or stop using it, and you can withdraw your consent. Write to info@signalhealth.me with the subject "Privacy request". We answer within 30 days and do not charge for it.

If you are unhappy with how we handle your information, you can complain to the Information Regulator of South Africa at inforegulator.org.za.

Who is responsible

Signal Health is the responsible party. Reach our Information Officer at info@signalhealth.me. Signal is a wellness and prevention service. It does not replace your doctor, and nothing on this site is medical advice.

If we change this policy in a way that affects you, we will update this page and tell current clients by email.