Your health information, your rights.

We collect only information needed to provide, secure, support, and improve the service.

• Identity and contact details such as name, email address, telephone number, date of birth, and profile photograph.
• Care information such as medical history, appointment notes, prescriptions, uploaded documents, laboratory results, allergies, and consent choices.
• Transaction, device, security, support, and usage records needed to operate the platform and prevent misuse.

Information is processed to create accounts, coordinate requested care, deliver records, process payments, support users, verify providers, keep the platform secure, and meet legal obligations. We do not sell personal medical information.

Information is shared only where the care journey, your instruction, a contract, or applicable law requires it.

• A chosen doctor may receive appointment context and records you have authorised for care.
• A pharmacy, laboratory, equipment vendor, or home-care provider receives only the information needed to fulfil the selected service.
• Infrastructure, communications, payment, fraud-prevention, and professional advisers operate under confidentiality and data-processing obligations.

Provider applicants may be asked for identity, address, qualification, professional-registration, practice, business, banking, and contact information. MyDoctor24 uses that information for manual consistency checks, regulator or issuing-body checks, risk review, audit, and re-verification. Only authorised personnel may review provider KYC records.

Some carefully selected technology providers may process information from infrastructure outside Nigeria. Where a cross-border transfer is necessary, MyDoctor24 applies contractual, access, security, and legal safeguards appropriate to the information and service.

We retain account, clinical, consent, transaction, and audit records only for the period required by care continuity, contractual obligations, dispute handling, security, and applicable Nigerian law. Records are securely deleted or de-identified when there is no longer a lawful need to retain them.

Essential cookies and local device storage keep sessions secure, remember accessibility or display preferences, and support core site functions. Optional analytics or marketing technologies should be used only after the required notice and choice are provided.

Subject to identity verification and lawful clinical-retention limits, you may ask to access, correct, export, restrict, object to, or delete personal information. You may also withdraw optional consent and lodge a complaint with the Nigeria Data Protection Commission.

Role-based permissions, provider verification, encrypted connections, secure storage controls, audit records, backups, monitoring, and incident procedures are used together. No digital service can promise absolute security, so controls are reviewed as risks and services evolve.

Send privacy questions, rights requests, or concerns to info@mydoctor24health.ng or through the contact page. We may request reasonable proof of identity before disclosing or changing account information.