Privacy policy

Last updated: September 2026

What ShareMyRx collects

Agents provide their own profile details and client contact records. Clients provide medication, pharmacy, physician, Medicare, and coverage details through a private form link. We collect only what is needed to deliver that information back to the agent who requested it.

How it is used

Client submissions are shown to the requesting agent, exported at the agent’s request, and optionally relayed to a webhook the agent configures. We do not sell data and do not use client health information for advertising.

Security

Data is stored in Supabase (Postgres) with row-level security so each agent can only access their own records. Form links are long random tokens. Payments are handled by Stripe; we never store card numbers.

Google user data

Agents can sign in to ShareMyRx with a Google account. When you do, Google sends us your email address, your name, your profile picture, and your Google account ID. We ask Google only for the basic sign-in scopes (openid, email, and profile). We do not request access to your Gmail, contacts, calendar, Drive, or any other Google data.

We use this information for one purpose: to create and sign you in to your ShareMyRx agent account, and to show your name and photo inside the app and on the invitation emails you send to your own clients. You can replace the photo and name from your profile page at any time.

It is stored in our database (Supabase Postgres, in the United States) with row-level security, so it is only ever read to serve your own account. We keep it for as long as your account exists. When your account is deleted, it is removed within 30 days, apart from copies in routine backups, which expire on their own schedule.

We do not sell Google user data, do not use it for advertising, and do not share it with anyone except the infrastructure providers that run ShareMyRx on our behalf (our database host, our application host, and our email provider), each acting only as a processor under our instructions. No human at ShareMyRx reads it except to support you or as required by law.

ShareMyRx’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To stop ShareMyRx from accessing your Google account, remove it under “Third-party apps & services” in your Google Account settings, or simply sign in with an email and password instead. To have your account and the Google data we hold deleted, email support@sharemyrx.com from the address on the account; we confirm within 30 days.

Your choices

Agents can delete clients and their submissions at any time from the dashboard. Clients may ask their agent to delete their information. Contact support@sharemyrx.com with questions.