How We Keep Your Health Data Private and Secure

Why Health Privacy Is Different

Medical data is not like other personal information. A leaked password can be changed. A leaked STD result cannot be undone. The reputational, emotional, and professional consequences of an unwanted health disclosure can be severe and lasting. We built NoSTDs with that reality at the centre of every technical decision.

Encryption at Rest and in Transit

All data transmitted between your device and our servers is protected by TLS 1.3. At rest, sensitive fields — including personal identifiers, health results, and private notes — are encrypted using AES-256. This means that even in the unlikely event of a database breach, the raw data is unreadable without the encryption keys.

Blind Indexing for Searchable Privacy

One challenge in medical database design is that you often need to search for records by sensitive identifiers (like an email address or phone number) without storing those identifiers in plain text. We solve this with blind indexing — a cryptographic technique that allows us to find your record without ever decrypting and exposing your actual identifier. It is the same approach used by leading healthcare systems worldwide.

Granular Sharing Controls

When you share your verified status, you decide exactly what is shared and for how long. You can share a simple "clean" indicator, a partial test summary, or a full verified report. All shares are time-limited and can be revoked at any moment. Every access to your shared data is logged, and you can see exactly who viewed what and when.

Your Data, Your Rights

You can export or permanently delete your account data at any time. Under India's Digital Personal Data Protection Act (DPDPA), you have the right to access, correct, and erase your personal data. We honour all such requests — and we have built our systems to make compliance straightforward, not bureaucratic.