SheRecs Health Privacy Notice

Effective Date: 9/19/26

This Health Privacy Notice explains how SheRecs LLC (“SheRecs,” “we,” “us,” or “our”) collects, uses, and protects health-related information in connection with the SheRecs Health RecList feature. It is a standalone document issued to comply with applicable health data privacy laws, including Washington State's My Health MY Data Act (RCW Chapter 19.373), and should be read alongside our general Privacy Policy and Terms of Service. In the event of any conflict between this notice and our general Privacy Policy with respect to health-related information, this notice controls.

SheRecs is a community recommendation platform, not a healthcare provider. The Health RecList exists so that members can share trusted health and medical professionals with the people they care about, the same way they would over coffee. This notice describes how we handle any health-related information that arises from that feature.

At a Glance

We don't ask for your health information. Any health-related content on SheRecs is voluntarily submitted by members when using the Health RecList.
We don't sell it. We have not sold and will not sell health-related information collected through the Health RecList.
We use it only to run the feature. Health-related information you submit is used solely to operate and deliver the Health RecList. Nothing more.
You are in control. You can access, correct, delete, or withdraw consent for your health-related information at any time.
Providers have rights too. If you are a health professional who has been recommended on SheRecs, you can manage or remove your information at any time.

1. What This Notice Covers

This notice covers health-related information that may arise from your use of the SheRecs Health RecList, the platform feature that allows members to recommend doctors, therapists, and other health and wellness professionals within their trusted networks.

Health-related information under applicable law is defined broadly. It includes not only formal medical data but also information that could reasonably indicate that a person has sought or received healthcare of any kind. On SheRecs, this may arise in two ways:

Notes you voluntarily include in a Health Rec that reference the type of care you sought or your experience with a particular kind of specialist.
Health-seeking behavior inferred from your use of the Health RecList, for example, the fact that you have recommended a particular type of health professional.

This notice does not cover information that falls outside the Health RecList, provider contact information submitted as part of a Rec (which is addressed in our general Privacy Policy), or formal medical records, which SheRecs does not collect.

2. Health-Related Information We May Collect

SheRecs does not require members to submit personal health information. When you use the Health RecList, you may choose to include descriptive notes about your experience with a provider. Those notes may incidentally contain health-adjacent content, for example, noting the type of specialist you visited or the general context of your care.

We do not collect, require, or maintain:

Formal medical records or clinical data;
Insurance or claims information;
Diagnoses, test results, or prescription information;
Biometric data of any kind; or
Precise location data.

Members are asked not to include personal health information about themselves or others in their Health Rec notes. Please keep your notes focused on the provider: their manner, responsiveness, specialty, and what made them worth recommending.

3. How We Use Health-Related Information

We use health-related information only for the limited purpose of operating and delivering the Health RecList feature you have requested. Specifically:

To store and display your Health Recs within the SheRecs community in accordance with your privacy settings.
To support the provider introductory process through which recommended health professionals are notified about SheRecs and given the opportunity to manage their listing.
To improve the relevance and quality of recommendations in aggregate and de-identified form only.

We do not use health-related information to target you with advertising, build health profiles for sale or licensing, train artificial intelligence models, or share with third-party advertisers or data brokers. We do not sell health-related information under any circumstances.

We also do not use location data or any other data to identify, track, or target members in connection with any healthcare facility or health service, including through geofencing.

4. How We Share Health-Related Information

4.1 With Other Members

Health Rec content is shared with other members in accordance with your privacy settings, the same way all other Recs are shared on SheRecs. Your name is visible only to direct friends; Recs may appear anonymized in search results for neighbors and friends-of-friends. You control these settings at any time in your account.

4.2 With Service Providers

We share information with trusted third-party vendors, such as cloud hosting and data storage providers, that support the operation of SheRecs. These vendors are authorized to access information only as necessary to provide services to us and are prohibited from using it for any independent purpose. They are bound by written agreements that reflect applicable health data privacy obligations.

4.3 For Legal Compliance

We may disclose information where required by law, court order, or to prevent serious harm. We will notify you in advance of any such disclosure where legally permitted.

4.4 What We Will Never Do

SheRecs will never sell health-related information. We will never share it with third-party advertisers, data brokers, or any entity that has not agreed to binding data protection obligations consistent with applicable health data privacy law.

5. Consent

By using the Health RecList feature, you consent to SheRecs's collection and use of any health-related information you voluntarily submit for the limited purpose of operating and delivering that feature. This consent is specific to that purpose only.

SheRecs will not use health-related information for any purpose beyond providing the Health RecList without seeking your separate, affirmative consent first. Consent cannot be implied by your continued use of the platform alone for any secondary purpose.

You may withdraw your consent at any time by contacting us at contact@sherecs.com. Withdrawing consent may affect your ability to use the Health RecList but will not affect your general SheRecs membership.

6. Your Rights

You have the following rights with respect to health-related information SheRecs holds about you:

Access. You may request confirmation of whether we hold health-related information about you and access to that information.
Correction. You may request correction of inaccurate health-related information.
Deletion. You may request deletion of health-related information we have collected about you.
Withdrawal of Consent. You may withdraw your consent to the processing of health-related information at any time.
Information About Sharing. You may request confirmation of whether and with whom we have shared your health-related information.
Non-Discrimination. You will not receive different treatment or be denied access to SheRecs for exercising any of these rights.

Washington State residents have additional rights under the My Health MY Data Act (RCW Chapter 19.373), including the right to obtain a list of third parties with whom health-related information has been shared and the right to bring a civil action for violations of that Act.

7. How to Submit a Request

To exercise any of the rights described above, please contact us at contact@sherecs.com with the subject line “Health Privacy Request.” Please include your name, the email address associated with your account, and a description of the right you would like to exercise.

We will verify your identity before processing your request and will respond within 45 days. If additional time is needed, we will notify you within that initial period. Responses are provided free of charge for up to two requests per calendar year.

7.1 Appeal Process

If we decline to take action on your request, you may appeal by writing to us at contact@sherecs.com within 30 days of receiving our decision. We will respond to all appeals within 60 days. If you remain unsatisfied, Washington State residents may contact the Washington State Attorney General's Office at www.atg.wa.gov or by calling 1-800-551-4636.

7.2 Service Providers: Managing Your Listing

If you are a health professional who has been recommended on SheRecs and would like to manage or remove your information, please visit sherecs.com/manage-my-listing or contact us at contact@sherecs.com. We will respond to all requests promptly.

8. Security and Retention

SheRecs applies the same security standards to health-related information as it does to all personal information, including encryption in transit and at rest and access controls limiting access to authorized personnel. No data system is entirely secure, and we encourage members to use strong passwords and enable available security features.

We retain health-related information only for as long as necessary to provide the Health RecList feature and to meet our legal obligations. If you delete a Health Rec or your account, associated health-related information will be removed from our active systems within approximately two weeks, subject to any legal retention requirements.

To report a security concern, please contact us at tech@sherecs.com.

9. Changes to This Notice

We will update this notice when our practices change or when applicable law requires it. We will always display the effective date at the top of this notice. If we make material changes to how we handle health-related information, we will notify you by email before those changes take effect. Changes that require additional consent will not take effect without it.

10. Contact Us

For questions about this notice or how SheRecs handles health-related information:

General questions and rights requests: contact@sherecs.com
Technical issues and security concerns: tech@sherecs.com
Provider listing management: sherecs.com/manage-my-listing