Skip to content

Service Providers

The companies that help us run Medly, what each one does and where it handles data.

The short version

  • Each provider may use data only to provide its service to us, under written terms at least as protective as ours.
  • We remain responsible for every provider on this list.
  • Clinics get 30 days’ notice before we add or replace a provider that handles patient records.

Our Providers

  • [Cloud hosting provider]

    Runs Medly’s servers and databases, and keeps backups.

    Data
    All Medly data, including patient records.
    Where
    [Hosting region]
    Records
    Handles personal data from clinics

  • [Kenyan data centre]

    Keeps the in-country copy of records for clinics in Kenya.

    Data
    Records of clinics in Kenya only.
    Where
    Kenya
    Records
    Handles personal data from clinics

  • [Email delivery provider]

    Sends sign-in links, invitations, receipts, notices and clinic messages to patients.

    Data
    Names and email addresses, and the message content, which can mention an appointment or a result being ready.
    Where
    [Region]
    Records
    Handles personal data from clinics

  • Paystack

    Takes card payments for Medly subscriptions.

    Data
    The billing contact’s name and email, and payment details. Paystack holds card numbers; Medly never sees them.
    Where
    Nigeria and Kenya
    Records
    Does not handle patient records

  • Expo, Google Firebase Cloud Messaging and Apple Push Notification service

    Deliver notifications and medicine reminders to the patient app.

    Data
    A device token and the notification text. We keep notification text free of diagnoses.
    Where
    United States
    Records
    Handles personal data from clinics

  • OpenStreetMap

    Shows the map when a clinic sets its location in Settings.

    Data
    Map requests from the staff member’s browser, which include their IP address. No patient data.
    Where
    United Kingdom
    Records
    Does not handle patient records

When This List Changes

We email clinic administrators at least 30 days before adding or replacing a provider that handles patient records, and update this page. A clinic can object, as set out in the data processing agreement in our Terms of Service.

Questions: hospitals@medly.africa