Silo Care privacy notice
Who runs Silo Care
Silo Care runs the Silo Care app and the service behind it. In this notice, "we" and "us" mean Silo Care.
This notice says what we collect when you use Silo Care, why we collect it, who else receives it, how long we keep it and how you can delete it.
While Silo Care starts up
Silo Care is open by invitation while it starts up. Only people whose email address we have added can sign in.
During this period the service holds sample people and sample records only. We provide them, and they describe no real person. You agree not to add anyone's real health records, names or papers. The service refuses a person's name typed in and any file that is not one of its samples.
What we collect
Your email address. You sign in on a page run by Cloudflare, which emails you a one-time code. Cloudflare then tells the service which email address signed in. We do not store the address itself. We store a fingerprint of it (a one-way hash) so that we can recognise your account the next time you sign in. While you are signed in, the app shows the address in Account.
What you add. The people you add to your account (during this period, sample people only), how you are related to each of them, and the sample records and papers you add for them, with the details you enter about them.
What you answer and schedule. Your answers to questions about a person's records, such as whether a medicine is still in use, the medicines, allergies and health problems you pick from the lists, and the appointments you add, with their date, time and doctor.
Feedback. When you mark an item on a visit sheet, for example as not useful, we keep what you chose and the reason you picked from the list.
Your consents. Each statement you accept, such as the terms of use and this notice, with its version, its words and the time you accepted it.
The access log. Each time the app asks the service for something, the service records the time, an internal number for your account, the person it concerned, what was asked and whether it was allowed. The same log records the service's own actions, such as carrying out a deletion, with internal numbers and counts. It records no name, no email address and nothing from the records.
Counts of use. The service counts how visit sheets are used, such as when one is opened or printed, with no name, account or person attached.
Technical logs. The service's own logs record technical events with the internal numbers of accounts and people, never a name, an email address or anything from the records.
What stays on your iPhone
The app keeps only these things on your iPhone between uses: your sign-in, the items you tick on a visit's list of things to bring (kept as references, not their words) and the service's notice for when it is offline. Your sign-in is stored so that it stays on this iPhone and does not move to another device.
Records, answers and other text are held in the app's memory only while it is open. The app does not use iCloud. If you share or print a visit sheet, it goes where you send it.
Delete everything on this iPhone, in Account, removes these things from this iPhone. It does not delete anything held by the service. To delete that too, use Delete my account. Cloudflare's sign-in page may also remember this iPhone in Safari for a short time; Delete everything on this iPhone does not remove that.
How we use it
We use what we collect only to run Silo Care: to sign you in and keep your account; to show you the records of the people you add, with your answers, appointments and visit sheets; to keep the service secure and know who opened what; and to learn which parts of the visit sheets are useful and fix what is wrong.
No ads, no tracking, no sale
Silo Care shows no ads. We do not track you across other companies' apps or websites, and the app contains no advertising or analytics code from other companies.
We do not sell or rent what we collect, and we do not give it to anyone except as this notice says or where the law requires us to.
Who else receives information
Cloudflare provides the network connection and the sign-in. It receives your email address to send you the one-time code and to tell the service who signed in. It also carries every request and answer between the app and the service, so the records you open pass through its network on their way to you. Cloudflare handles this under its own privacy policy.
No AI model run by another company receives anything from your account or from the people you add. During this period the service works out what it shows with its own fixed rules.
How we keep it
We keep what your account holds for as long as the account exists. Files and papers added for a person are stored encrypted, each person's with a key of their own.
Deleting your account
Delete my account, in Account, deletes your account and the records of every person you added. From that moment nobody can open those records in Silo Care, and the files and papers added for them can no longer be read, because the keys that lock them are destroyed.
Once 14 days have passed, the service removes the records and the names of the people you added, closes your account and erases the fingerprint of your email address. Until then you can still sign in, but your account shows no one and no one can be added. A deletion cannot be undone.
Some records are kept after your account is deleted, because they show what happened and when: the consents you gave (each statement, its version and when you accepted it); the access log (times, internal numbers, what was asked and whether it was allowed); the record that the deletion was asked for and carried out; a basic entry for your account and for each person you added (internal numbers, dates, time zone and how you were related, without names); and the service's technical records of its work for them (internal numbers, dates, counts and checksums). None of these holds a name, an email address or a fingerprint of an email address, so once the deletion is complete they no longer name you. The counts of use never named anyone and stay as they are.
Withdrawing your consent
You can withdraw your consent at any time by deleting your account, in Account, with Delete my account. The section on deleting your account says what happens then. You can also stop using Silo Care at any time.
Changes to this notice
When this notice changes, the new text has a new version and date. We keep a record of each version you accepted and when.
Contact
Questions and requests about your information go to Silo Care through the support link on Silo Care's App Store page.