What we collect
Only what's needed to run the features you use.
- Account details
- Your name and email address, used to sign you in and identify your requests.
- Medication information
- The medications, doses, schedules, fill dates and notes you choose to add.
- Activity
- Which doses you mark as taken, your AI assistant conversations, and pharmacy requests and messages.
- Billing status
- Your plan and payment records. Card details are entered on Stripe's secure checkout and never reach Medora's servers.
How we protect it
Encrypted in transit
Every connection to Medora uses HTTPS (TLS), so data travelling between your device and our servers can't be read in transit.
Verified sign-in on every request
Sign-in is handled by a dedicated identity provider. Each request carries a short-lived, signed session token that our servers verify before returning any data. We never see or store your password.
You only see your own data
Every medication, dose log, conversation and request is tied to your account. Other customers can never view it.
Limited pharmacy access
Only the pharmacy you choose can see your requests, and its staff must accept an emailed invitation before getting access. Every view, reply and status change is shown to you in your access history. Staff cannot see your AI conversations or dose history.
Trusted processors
We rely on a small set of providers: an identity provider for sign-in, Stripe for payments, and an AI model provider that processes your assistant questions only to generate answers.
No selling of data
We never sell your personal or health information, and we don't use it for advertising.
HIPAA
Medora is committed to protecting your health information in line with the U.S. Health Insurance Portability and Accountability Act (HIPAA) Privacy and Security Rules. We apply its core principles across the service: we use only the minimum information needed to provide each feature, restrict access to your information to you and authorised pharmacy staff, protect data in transit with encryption, and never sell or disclose your health information for marketing.
When your pharmacy uses Medora to receive and respond to your requests, your information is handled on the pharmacy's behalf and only to fulfil those requests. You have the right to access your information at any time in the app and to delete it whenever you choose.
You're in control
- Delete any medication, conversation or pharmacy request at any time.
- Erase all of your health data in one step from Plan & billing → Privacy & data after signing in.
- Cancel a paid plan whenever you like; you keep your data on the Free plan until you delete it.
Medical disclaimer
Medora provides educational information and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult your physician or pharmacist about your medications. In an emergency, call your local emergency number.
Last updated November 2026.