Privacy overview
How the FreeMedFinder prototype handles account data and simulated marketplace records—and why real patient-data collection remains disabled.
Operator and current status
FreeMedFinder is the patient-facing service owned by InStockRx. The final production legal entity, privacy-controller designation, mailing address, privacy contact, and support service have not yet been published. Because those accountability details are incomplete, this prototype must not be used to collect or coordinate real prescriptions, insurance member data, government identifiers, clinical records, or pharmacy communications.
Information you provide
A FreeMedFinder prototype account stores a display name, normalized email address, salted password hash, and hashed recovery code. Marketplace requests may store medication search details, an optional contact email, simulated offers, and status events. Transfer demonstrations accept fictional data only. Never enter a real prescription number, date of birth, address, phone number, insurance identifier, prescription image, or government ID.
Prototype data separation
Simulated pharmacy, inventory, price, offer, and workflow records are tagged as prototype data and are kept conceptually separate from real waitlist submissions. The prototype is not intended for storing prescriptions, diagnoses, insurance member identifiers, or other detailed clinical records.
How information is used
Information is used to operate the requested experience, authenticate accounts, track demand, improve product design, troubleshoot the service, and support account security. FreeMedFinder should not sell prescription information or use it for unrelated advertising.
Storage, retention, and deletion
Prototype account and workflow records may remain in the project database until an authorized project operator removes them. Self-service account deletion is not yet available, and there is no monitored privacy inbox. Do not use the prototype for data that may require urgent correction or deletion. Production launch is blocked until retention periods, deletion workflows, legal holds, and verified request channels are approved and tested.
Third parties and communications
No live pharmacy, insurer, coupon network, fax, SMS, email, payment, transfer, prescription, or inventory provider is connected to the patient workflow. The infrastructure vendors needed to host the prototype may process ordinary technical logs and account-session data. Production use requires a published vendor inventory, contracts, permitted-use rules, security review, and patient-facing disclosures.
Future production review
A production launch requires approved controller and operator details, a finalized privacy policy, data-flow inventory, retention schedule, deletion and correction rights, access controls, incident response, vendor review, a monitored privacy contact, and any healthcare privacy obligations applicable to the final operating model.
Last updated for the clickable prototype: September 22, 2026.