Privacy Policy

Ehmiat ("Ehmiat", "we", "us", or "our") builds software for businesses in Pakistan, starting with eCare Lab, a laboratory information system for diagnostic labs. This Privacy Policy explains what information we collect, how we use it, and the choices you have — whether you're a lab using eCare Lab, a member of that lab's staff, or a patient whose sample was processed through it.

By using our products, you agree to the collection and use of information as described here.

We collect information in three ways:

• Account information you provide directly — name, email, phone number, lab name, and business details when you register or apply for eCare Lab.
• Patient and sample data entered by a lab into eCare Lab — names, contact details, test results, and related medical information, entered and controlled by that lab, not by Ehmiat.
• Usage information collected automatically — device type, browser, IP address, and how you interact with our products, used to keep the service reliable and secure.

We use the information we collect to:

• Provide, operate, and maintain eCare Lab and our other products
• Deliver lab results to patients, by WhatsApp, SMS, or the patient portal, on a lab's instruction
• Communicate with you about your account, applications, and support requests
• Detect, prevent, and address technical issues, fraud, or misuse
• Meet the regulatory and compliance requirements that apply to diagnostic labs in Pakistan

Ehmiat does not sell personal data or patient data, to anyone, ever. We do not share individual records with third parties for marketing or advertising purposes, and we do not analyse individual records for profit.

We may share information with service providers who help us operate our products — for example, our cloud hosting and messaging providers — under agreements that require them to protect it and use it only to provide that service to us.

We may disclose information where required by law, such as in response to a valid regulatory or court order.

At the aggregate level, anonymised data may be used to understand health trends or improve our products. This is never done at the cost of any individual's privacy, and individual records are never included.

We treat customer and patient data as a trust, not a commodity. Our safeguards include:

• Encryption of data in transit and at rest
• Isolated data environments — one customer's data is never accessible to another
• Role-based access control, so team members see only what their role requires
• A tamper-proof audit trail on every action taken in the system

No method of transmission or storage is completely secure, but we work continuously to protect your information using industry-standard practices.

When a diagnostic lab uses eCare Lab, that lab is the data controller for the patient information it enters — Ehmiat processes it on the lab's behalf, as a data processor. Patients access their own results through a secure, coded link; no one else can open a report meant for another patient.

Questions about a specific test result or a specific lab's records should be directed to that lab. Questions about how eCare Lab itself handles data should be directed to us at [email protected].

We retain account and patient data for as long as an account is active, and afterward for as long as needed to meet legal, regulatory, or record-keeping obligations that apply to diagnostic labs in Pakistan. You can request deletion of your account information at any time, subject to those obligations.

You may ask us to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information, subject to our legal and regulatory retention obligations

To exercise any of these rights, contact us at [email protected].

We use cookies and similar technologies to keep you signed in and to understand how our products are used. See our Cookie Policy for details.

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

If you have questions about this Privacy Policy or how we handle your data, reach us at [email protected] or through our contact page.