Privacy Policy

This Privacy Policy explains how the MyCareRoster iOS app ("MyCareRoster", "we", "us", or "our") handles information. MyCareRoster is published by Rubber Rhino. It is a private directory of the health care providers that you and your family see, and it is built so that your information stays with you and your own Apple Account.

Contacts

With your permission, MyCareRoster reads the contacts in your Contacts list named "Medical" to show your providers' names, organizations, phone numbers, email addresses, and addresses. These details are read on your device each time. Phone numbers, email addresses, and addresses are not uploaded by MyCareRoster; provider names and organizations are included, encrypted, in your roster's iCloud sync, as described under "Your roster" below.

When you paste a provider's details or an appointment reminder, MyCareRoster also searches your other contacts for the name it found, reading only names and organizations, so you can add an existing contact to the Medical list instead of creating a duplicate. Nothing from that search is kept.

MyCareRoster changes Contacts only when you ask it to: creating the Medical list, creating a provider contact (including one filled in from text you paste), adding contacts you pick to the Medical list, updating a provider contact's name or details with the changes you choose and confirm, or opening a contact in Apple's contact editor. It never deletes contacts or removes phone numbers, email addresses, addresses, or websites from them, and never writes your notes, teams, or private profiles into Contacts.

Calendar and appointments

From version 1.1, MyCareRoster can show and add appointments with your providers. Your calendars remain where appointments are kept; MyCareRoster doesn't store anything about them.

• Adding an appointment opens Apple's event editor, which doesn't need calendar access. MyCareRoster fills in a title (the provider's name and specialty, plus the family member's name if your roster has more than one), a location from the provider's addresses in Contacts or from a pasted reminder, and a MyCareRoster link that holds random identifiers rather than names. Nothing is saved until you save the event in the editor, and you can change or remove anything first.
• With full calendar access, which you can allow or decline, MyCareRoster reads the events in your calendars on this device to list a provider's past and upcoming appointments, and to suggest events whose title or notes mention the provider's name. Events are read on your device each time they're shown, and are not kept or uploaded by MyCareRoster.
• MyCareRoster changes an event only when you ask, after showing you the change: linking it to a provider or unlinking it, changing its time or location (adding a dated note of the earlier location), noting that you started a call to cancel, or deleting a cancelled appointment.
• The calendar you choose for new appointments is remembered on this device only.

An event you add or change is kept by the calendar it belongs to, like any other event: on this device, or with the account that calendar belongs to, such as iCloud, which handles it under its own privacy policy. People who share that calendar, or are invited to the event, can see what it contains, including any provider name or address MyCareRoster filled in.

Pasted text

You can paste an appointment reminder, or a provider's details copied from a webpage, an email signature, or a photo of a business card. MyCareRoster reads the pasted text on your device to find dates, times, names, addresses, and contact details, shows you what it found, and doesn't keep the text. MyCareRoster can't read your messages or email; it sees only what you paste.

Your roster

Information you add in MyCareRoster — family member names, care teams, provider roles and specialties, primary GP choices, and notes — is stored on your device with iOS Data Protection. To keep your iPhone and iPad in sync, it is also stored in your private iCloud database. Before it leaves your device, it is encrypted with a key kept in your iCloud Keychain, so iCloud holds only encrypted data. So that your devices can match providers, provider names and organizations are included (encrypted), along with a one-way fingerprint (a hash) of each provider's phone numbers and email addresses, used only for that matching. The phone numbers and email addresses themselves, postal addresses, and anything about your appointments are not included.

Private family profiles

A private profile can hold a family member's legal name, allergies, medicines, conditions, procedures, and health, insurance, and patient identifiers. Opening it requires Face ID, Touch ID, or your device passcode. Face ID and Touch ID are handled by iOS; MyCareRoster never receives biometric data.

Private profiles are encrypted and stored only on your device by default. If you turn on Sync with iCloud in Settings, profiles are encrypted on your device before being stored in your private iCloud database, and only that encrypted data reaches iCloud. You can turn sync off at any time and choose to delete the iCloud copy.

When you copy a value from a private profile, it is placed on this device's clipboard only (not shared with your other devices) and expires after two minutes.

iCloud

MyCareRoster uses Apple's CloudKit private database, which belongs to your Apple Account. We cannot access your private iCloud data, and the encryption described above means its contents are not readable by Apple either. How Apple handles iCloud is described in Apple's Privacy Policy.

Purchases

MyCareRoster has a free version with limits on the number of family members, care teams, and providers. The optional MyCareRoster Unlimited is a one-time in-app purchase, processed by Apple, that removes those limits. We do not receive your Apple ID, payment card, or billing information. The app checks your purchase with Apple on your device.

Sharing

MyCareRoster shares information only when you choose to, for example by calling or emailing a provider, which opens Apple's Phone or Mail app, or by saving an appointment in your calendar as described above. A web link or phone number in a pasted reminder opens only after MyCareRoster shows it to you and you confirm. We do not share your information with anyone.

Support information

If you contact us for help, we may ask you to open MyCareRoster's Support Info screen and copy its contents into your message. The app never sends it automatically; we receive it only if you paste it into a message to us. It contains the app version and build, how the app was installed, your device model, iOS version, language, region, and time zone; Contacts permission, Medical list status, and the number of contacts in the list; iCloud and sync status, including whether sync is on, when your roster and private profiles were last saved, whether this device has its encryption key, and the most recent iCloud error (an error description only, never your data); counts of family members, teams, providers, unavailable providers, pending reconnections, private profiles, and profile versions to review; your MyCareRoster Unlimited purchase status and purchase environment; whether the sample family is shown; whether Face ID or Touch ID is available; and two identifiers: your MyCareRoster Unlimited transaction ID and your iCloud user record ID for MyCareRoster (a random identifier that doesn't reveal your Apple ID). It never includes names, contact details, notes, or any private profile or health information. We use it only to answer your request.

Deleting your information

Deleting MyCareRoster from a device removes the information stored on that device. To remove the encrypted copies in iCloud, turn off private profile sync and choose to delete the iCloud copy, and remove MyCareRoster's data from iCloud in the Settings app under your Apple Account > iCloud. MyCareRoster's Diagnostics section, shown by tapping the version number in its Settings seven times, can also delete its iCloud copies, or delete everything it has stored, including the iCloud copies and its encryption keys, after Face ID, Touch ID, or your passcode. Your contacts remain in Contacts, and appointments, including MyCareRoster links and notes in them, remain in your calendars until you edit or delete them there.

Children

MyCareRoster lets a parent or carer record information about family members, including children. That information stays on the user's devices and private iCloud account as described above, and in any appointments the user saves in their own calendars. We do not knowingly collect personal information from anyone, including children.

Not medical advice

MyCareRoster organizes contact details and information you enter. It is not a medical device and does not diagnose, monitor, or treat any condition or give medical advice.

This website

This website, mycareroster.com, uses no cookies, analytics, tracking, or scripts, and has no forms. It is hosted by GitHub Pages and delivered through Cloudflare. Like any web host, they process standard request information, such as your IP address and browser type, to deliver and protect the site, under their own policies: the GitHub General Privacy Statement and the Cloudflare Privacy Policy. We don't use that information to identify or track visitors.

If you email us, we use your message only to reply to you and to help with your request. We don't add you to mailing lists.

Changes to this policy

If we update this policy, we will revise the "Last updated" date above. Material changes will be reflected here before they take effect.

Contact

Questions about this policy? Email us at [email protected].