This policy explains how MYDOCTOR247 LIMITED, trading as MyDoctor247, collects, uses, shares, retains, and protects personal and health information when patients and providers use the platform.
Information we collect
We collect only information needed to provide, secure, support, and improve the service.
- Identity and contact details such as name, email address, telephone number, date of birth, and profile photograph.
- Care information such as medical history, appointment notes, prescriptions, uploaded documents, laboratory results, allergies, and consent choices.
- Transaction, device, security, support, and usage records needed to operate the platform and prevent misuse.
Purpose and lawful use
Information is processed to create accounts, coordinate requested care, deliver records, process payments, support users, verify providers, keep the platform secure, and meet legal obligations. We do not sell personal medical information.
Who controls your information
MYDOCTOR247 LIMITED determines why and how personal information is used for core platform accounts, security, booking, payment, support, provider verification, and audit activity, and acts as data controller for those activities. Independent healthcare providers may act as separate data controllers for the professional care records and decisions they create. Where MyDoctor247 processes information only on a documented partner instruction, it acts as a processor for that activity.
Care partners and third parties
Information is shared only where the care journey, your instruction, a contract, or applicable law requires it.
- A chosen doctor may receive appointment context and records you have authorised for care.
- A pharmacy, laboratory, equipment vendor, or home-care provider receives only the information needed to fulfil the selected service.
- Infrastructure, communications, payment, fraud-prevention, and professional advisers operate under confidentiality and data-processing obligations.
WhatsApp video-call privacy
WhatsApp is available only for the live video call attached to a paid, confirmed MyDoctor247 appointment. It remains a third-party service outside the platform.
- WhatsApp is used only for the live video call attached to this paid, confirmed appointment. It is not an approved channel for clinical chat, documents, prescriptions, results, ongoing follow-up, or a later unbooked consultation.
- At the booked time, the doctor may send one brief connection message and then initiates the WhatsApp video call.
- The assigned doctor can access the mobile number saved on the patient's profile only during the appointment access window and only after accepting the doctor rules. The WhatsApp number used by the doctor becomes visible to the patient.
- The doctor should use a dedicated professional WhatsApp Business account where available, keep the account secure, and never allow unauthorised staff or another person to use the patient's number.
- The WhatsApp video call is not recorded or automatically copied into the MyDoctor247 patient record. The doctor must enter the clinically relevant consultation summary, notes, prescriptions, referrals, and follow-up plan in MyDoctor247. Sensitive documents must stay in the secure portal.
- Neither participant should continue clinical care in WhatsApp after the booked call or arrange another consultation privately. Any follow-up must use MyDoctor247 secure messages or a new MyDoctor247 appointment so that consent, payment, clinical records, and support remain traceable.
- Do not send medical records, photographs, prescriptions, payment details, or ongoing clinical messages through WhatsApp. Report any provider contact outside the booked video call to MyDoctor247 Support.
- WhatsApp is a separate third-party service. Phone and profile information may be visible there, participants can save, forward, screenshot or record content, and WhatsApp's own privacy terms, device settings, international processing, and backup rules apply. MyDoctor247 cannot control information after it leaves the platform and may be unable to verify or support care arranged outside the recorded booking, subject to rights that cannot lawfully be excluded.
MyDoctor247 Video privacy
MyDoctor247 Video is an appointment-specific consultation room available only to the booked patient and assigned doctor through their signed-in accounts.
- The room uses a contracted video infrastructure provider to transmit encrypted live audio, video, screen-sharing, and technical connection data. The provider may process that data outside Nigeria under appropriate contractual, access, and data-transfer safeguards.
- The room opens shortly before the appointment and each participant receives a short-lived access token. Permanent public meeting links are not issued and the room is limited to two participants.
- MyDoctor247 Video does not record consultations and room chat is disabled. The doctor records the structured clinical summary in MyDoctor247; prescriptions, reports, and other medical documents remain in the secure portal.
- Connection-quality events may be used during the session to reduce video bandwidth or pause outgoing video so that audio remains usable. MyDoctor247 does not promise uninterrupted service on every device or network.
Google Meet and Zoom privacy
If Google Meet or Zoom is selected, MyDoctor247 verifies the signed-in participant and releases the third-party meeting handoff only during the appointment access window.
- The meeting provider processes live audio, video, screen-sharing, device and connection data under its own privacy and service terms. MyDoctor247 does not control the provider application or a participant's device.
- Meeting URLs are not displayed in public profiles, appointment lists, email, or calendar data. Do not forward a meeting handoff to another person.
- Clinical summaries, prescriptions, reports and sensitive documents must remain in MyDoctor247. A provider meeting is not automatically copied into the patient record.
- MyDoctor247 does not enable recording. Participants must not record unless applicable law permits it and every affected person has expressly agreed.
Healthcare-provider verification information
Provider applicants may be asked for identity, address, qualification, professional-registration, practice, business, banking, and contact information. MyDoctor247 uses that information for manual consistency checks, regulator or issuing-body checks, risk review, audit, and re-verification. Only authorised personnel may review provider KYC records.
International processing and safeguards
Some carefully selected technology providers may process information from infrastructure outside Nigeria. Where a cross-border transfer is necessary, MyDoctor247 applies contractual, access, security, and legal safeguards appropriate to the information and service.
Retention and deletion
We retain account, clinical, consent, transaction, and audit records only for the period required by care continuity, contractual obligations, dispute handling, security, and applicable Nigerian law. Records are securely deleted or de-identified when there is no longer a lawful need to retain them.
Cookies and device storage
Essential cookies and local device storage keep sessions secure, remember accessibility or display preferences, and support core site functions. Optional analytics or marketing technologies should be used only after the required notice and choice are provided.
Your privacy rights
Subject to identity verification and lawful clinical-retention limits, you may ask to access, correct, export, restrict, object to, or delete personal information. You may also withdraw optional consent and lodge a complaint with the Nigeria Data Protection Commission.
How information is protected
Role-based permissions, provider verification, encrypted connections, secure storage controls, audit records, backups, monitoring, and incident procedures are used together. No digital service can promise absolute security, so controls are reviewed as risks and services evolve.
Privacy questions and requests
Send privacy questions, rights requests, or concerns to support@mydoctor247care.com or through the contact page. We may request reasonable proof of identity before disclosing or changing account information.
Ask before you act.
Our support team can explain the relevant policy or route a formal privacy, consent, legal, or security request.
This public document is intended to explain MyDoctor247’s operating approach and does not replace personalised legal or medical advice.