Consumer health data privacy policy

Written for the Washington My Health My Data Act (RCW 19.373) and similar laws (Nevada SB 370, Connecticut). Last updated August 25, 2026.

This policy supplements the HSA Proof Privacy Policy and applies to "consumer health data" as defined by those laws.

Categories of consumer health data the app processes

Information you capture about medical expenses: provider or pharmacy names, dates of service, amounts paid, expense categories (for example "prescription" or "dental"), patient labels you enter, and images or files of receipts, explanations of benefits, and invoices, which may show diagnoses, prescriptions, or procedures.

Purpose

Solely to let you keep records of potentially HSA-qualified expenses and generate exports for your own use. This is the service you request when you use the app.

Sources

You. The app does not import from other apps, accounts, providers, or insurers.

Sharing

None. Mount Si Labs LLC does not collect, sell, or share consumer health data. Data you sync to iCloud is stored by Apple in your private database under Apple's terms; Apple acts as your storage provider, not ours.

Processors

None engaged by Mount Si Labs LLC for consumer health data.

Your rights and how to exercise them

Access, export, withdraw consent, and delete: all available in the app (Settings → Export; Settings → Delete all my data; Settings → Sync). These work immediately and do not require contacting us. Because we never receive your data, there is nothing for us to delete on our side. If you believe we hold any data about you, email privacy@hsa-proof.com and we will respond within 45 days.

Appeals

If you are unsatisfied with a response, reply to the same thread with "Appeal" in the subject. You may also contact the Washington Attorney General.