Privacy notice
How MedAmia handles your personal information, under India's Digital Personal Data Protection Act, 2023. Last updated 12 November 2026.
Who we are
MedAmia ("we") decides why and how your personal data is used, which makes us the "Data Fiduciary" under the Act. We coordinate treatment in India for patients from other countries. We are not a hospital and do not give medical advice.
On this website
What we collect. Only what you type into our contact form (name, email, phone, country, your message and the treatment you are interested in), and, if you allow it, which campaign link you arrived by.
Why. To reply to you. You give these details voluntarily for that purpose, and we use them for nothing else. If you ask us to stop, we will delete them.
Cookies and similar storage. The site needs no cookies. To remember your cookie choice we keep a small note in your browser's local storage. If you allow measurement, we also remember for the current browser session which campaign link brought you here (the utm_ and ref values), so that a message or intake can be tied to the message that helped you find us; if you say no, nothing is stored. You can change your choice at any time with Cookie settings in the page footer, and turning measurement off clears what it stored.
In the MedAmia app (your intake and case)
What we collect. Your name, contact details, date of birth, gender, country and languages; the health information and documents you give us (condition, history, reports, passport); who is travelling with you; and your messages and payments with us.
Why, and your consent. To review your case with our doctor, match you with hospitals, arrange treatment, travel, stay and aftercare, and take payment. The app shows you this notice before you start and asks for your consent with a clear tick-box; it is needed to provide the service. A separate, optional box covers news and offers by email, and saying no never affects your care. We ask again, separately, when you choose a hospital: that is when we share your identity and the records our doctor approved with that hospital.
Who sees it. MedAmia staff and our clinical reviewer. Hospitals first receive only a de-identified summary, with no name or contact details, so they can quote. Your identity and records go only to the hospital you choose. Companies that run our systems for us (email delivery, card payments, hosting) handle data on our instructions under contract. We do not sell your information.
Sending data to India. If you live outside India, your information is sent to us and to the hospital you choose in India, because that is the service you ask for.
Children. For a patient under 18 we need a parent or legal guardian to give consent, we record who gave it, and we do not use the child's data for marketing.
How long we keep it
While we are providing the service and for as long as the law requires us to keep medical, financial and tax records. After that we erase or anonymise it. If you stop using MedAmia for a long time and have no open case, we may email you first and then erase your account unless you sign in. If you withdraw consent, we stop using your data and erase it, except what the law makes us keep.
How we protect it
Medical files are encrypted. Access is limited to the people who need it for your case and is logged. Hospitals see only what you have agreed to share. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
Your rights
You can, at any time: see a summary of the personal data we hold and who we share it with, and download a copy; correct, complete or update it; ask us to erase it; withdraw any consent as easily as you gave it; nominate someone to exercise these rights if you die or cannot; and complain to us. In the app, all of this is under Privacy. Otherwise write to the contact below. We aim to answer within 30 days.
Questions and complaints
Grievance Officer, MedAmia: privacy@medamia.com
If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Changes
When we change this notice in a way that matters, we will say so here and, for app users, ask for consent again where the law requires it.