MediFinder LogoMediFinder Logo
HomepageDiscoverCommunityListsAtlas

MEDIFINDER

Consumer Health Data Privacy Notice

Standalone Notice Under the Washington My Health My Data Act (RCW 19.373)

Legal Entity

Yeshan Healthtech, LLC

Brand / DBA

MediFinder

Registered Address

5205 Congress Ave APT 524, Boca Raton, Florida 33487-3905, United States

Governing Law

Florida, United States

Version

1.0

Published

19 May 2026

Contact Email

[email protected]

Website

medifinder.com

This Notice applies to Washington State residents under the My Health My Data Act (MHMDA). It is a separate, standalone document required by RCW 19.373.020. It supplements (but does not replace) our general Privacy Policy. By using MediFinder while in Washington State, you acknowledge this Notice. To exercise MHMDA rights, contact [email protected] with subject "Consumer Health Data Request".

1. Purpose and Scope

This Notice describes how Yeshan Healthtech, LLC ("MediFinder", "we") collects, uses, shares, and protects Consumer Health Data of Washington State consumers under the Washington My Health My Data Act ("MHMDA"), RCW 19.373.

This Notice covers our website at medifinder.com, our mobile applications (iOS and Android), and all related services accessed from Washington State.

2. What Is Consumer Health Data?

Under MHMDA, "Consumer Health Data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status, including but not limited to:

  • Conditions, treatments, diseases, or diagnoses
  • Social, psychological, behavioral, or medical interventions
  • Health-related surgeries or procedures
  • Use or purchase of prescribed medications
  • Bodily functions, vital signs, symptoms, or measurements
  • Diagnoses or diagnostic testing, treatment, or medication
  • Reproductive or sexual health information
  • Gender-affirming care information
  • Biometric data related to health
  • Genetic data
  • Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies
  • Data that identifies a consumer seeking health care services
  • Any information that a regulated entity processes to associate or identify a consumer with the data above (including data derived or extrapolated, even if not stated)

3. Categories of Consumer Health Data We Collect

  • Medical specialty or treatment you search for
  • Symptoms, conditions, or medical history voluntarily described in Consultation Requests
  • Treatment preferences and parameters (budget, timeframe, location, language)
  • Content voluntarily posted in our Community related to your health
  • Messages exchanged with healthcare Providers through the platform
  • Health-related photos and videos you choose to upload
  • Inferences drawn from your search behavior on health topics
  • Location data when reasonably linkable to seeking healthcare (precise location is only collected with explicit consent for nearby provider search and is not retained)

4. Sources of Consumer Health Data

  • Directly from you (registration, search queries, Consultation Requests, community posts, messages, uploads)
  • Automatically from your interactions with our platform
  • From healthcare Providers when they communicate with you through our platform
  • From third-party sign-in services (Google, Apple, Facebook), if you authorize us to receive such data

5. Purposes of Collection, Use, and Sharing

5.1. Primary Purposes

  • Providing the MediFinder Services (search, discovery, messaging, community)
  • Matching you with relevant healthcare providers based on your search criteria and Consultation Requests
  • Communicating with you about Services and your account
  • Improving platform features and user experience
  • Detecting fraud, abuse, and security threats
  • Complying with legal obligations

5.2. Secondary Uses (Require Your Explicit Consent)

Under MHMDA, collection or sharing of Consumer Health Data beyond what is necessary to provide the service you requested requires your explicit consent. We do not collect, use, or share Consumer Health Data for any secondary purpose without obtaining your separate, explicit consent.

5.3. We Do Not Sell Consumer Health Data

CRITICAL: MEDIFINDER DOES NOT SELL CONSUMER HEALTH DATA. THE SALE OF CONSUMER HEALTH DATA WITHOUT EXPRESS WRITTEN VALID AUTHORIZATION IS A SERIOUS VIOLATION UNDER MHMDA, AND WE DO NOT ENGAGE IN ANY SUCH SALES.

6. Categories of Third Parties With Whom We Share

  • Healthcare Providers you select (to fulfill your Consultation Requests)
  • Cloud hosting providers (AWS, Google Cloud, Microsoft Azure)
  • Video and image storage and content delivery providers
  • Communication service providers (email, SMS, push notifications)
  • Customer support tools
  • Analytics service providers (limited to aggregated/de-identified data where possible)
  • Security and content moderation service providers
  • Government and law enforcement (in response to valid legal process or as required by law)

7. Geofencing

MEDIFINDER DOES NOT ENGAGE IN GEOFENCING AROUND ANY IN-PERSON HEALTHCARE FACILITY, INCLUDING ANY HEALTHCARE PROVIDER'S OFFICE, HOSPITAL, CLINIC, PHARMACY, OR ANY OTHER ENTITY PROVIDING IN-PERSON HEALTHCARE SERVICES OR SUPPLIES. WE DO NOT USE GEOFENCING TO IDENTIFY, TRACK, COLLECT DATA FROM, OR SEND NOTIFICATIONS TO CONSUMERS SEEKING HEALTHCARE SERVICES AS PROHIBITED BY RCW 19.373.060.

8. Your MHMDA Rights

As a Washington consumer, you have the following rights with respect to your Consumer Health Data:

8.1. Right to Confirm and Access

You have the right to confirm whether MediFinder is collecting, sharing, or selling your Consumer Health Data and to access such Consumer Health Data, including the categories of third parties with whom we share.

8.2. Right to Withdraw Consent

You have the right to withdraw consent from MediFinder's collection and sharing of your Consumer Health Data at any time.

8.3. Right to Delete

You have the right to have your Consumer Health Data deleted. Upon request, we will:

  • Delete your Consumer Health Data from our records
  • Notify all third parties to whom we have disclosed your Consumer Health Data to delete the data
  • Notify our service providers, contractors, processors, and other persons with whom we have shared your data

8.4. Right to Appeal

If we deny your MHMDA request, you have the right to appeal our decision. Submit appeals to [email protected] with subject "Appeal Request". If we deny your appeal, you have the right to file a complaint with the Washington State Attorney General.

9. How to Exercise Your MHMDA Rights

  • Email: [email protected] with subject "Consumer Health Data Request"
  • Postal: Yeshan Healthtech, LLC, 5205 Congress Ave APT 524, Boca Raton, Florida 33487-3905, United States
  • Through privacy controls within your account settings

We will:

  • Respond to your request within 45 days of receipt
  • Extend the response period by up to 45 additional days where reasonably necessary, with notice to you
  • Verify your identity to protect against fraudulent requests
  • Provide one free response per consumer per year
  • Provide a clear, accessible method to appeal denied requests

10. Authentication and Verification

To protect your data, we will request information sufficient to verify your identity before fulfilling MHMDA rights requests. The verification information requested will be limited to what is necessary to prevent fraudulent access.

Authorized agents may submit requests on your behalf. Authorized agent requests must include written permission from you and may require you to verify your identity directly with us.

11. Data Security

We implement and maintain reasonable administrative, technical, and physical safeguards to protect Consumer Health Data, including:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Strict role-based access controls
  • Multi-factor authentication for personnel
  • Regular security audits, vulnerability scans, and penetration testing
  • Personnel training on Consumer Health Data privacy
  • Incident detection and response procedures
  • Restrictions on the use of Consumer Health Data by personnel based on need-to-know

12. Data Retention

We retain Consumer Health Data only for as long as necessary to fulfill the purpose for which it was collected, unless you have provided additional consent or we are required to retain it by law:

  • Consultation Requests and Health Data: up to 24 months from your last interaction
  • Active account Health Data: while account is active
  • Closed account Health Data: deleted within 12 months of account closure (except for legal retention)
  • Backup copies: up to 90 days after primary deletion

13. Children Under 13

MediFinder does not knowingly collect Consumer Health Data from children under 13 without verifiable parental consent. If we learn we have collected such information without consent, we will delete it promptly. Parents may contact [email protected] with subject "Privacy Inquiry" to request review or deletion of their child's data.

14. Service Providers and Contractors

We engage third parties to provide services on our behalf under written contracts that:

  • Limit the use of Consumer Health Data to specific purposes
  • Prohibit the sale of Consumer Health Data
  • Require security safeguards equivalent to those we apply
  • Require deletion of Consumer Health Data when our service relationship ends
  • Require notification to us of any security incident

15. Changes to This Notice

  • Material changes will be communicated at least 30 days in advance via email and in-platform notification
  • The current version is published at medifinder.com/consumer-health-privacy
  • Continued use after the effective date constitutes acceptance

16. Private Right of Action

Washington consumers have a private right of action under the Washington Consumer Protection Act, RCW 19.86, for violations of MHMDA. Damages may include up to USD 25,000 per violation. You may also file complaints with the Washington State Attorney General's Office.

Washington State Attorney General's Office:

  • Website: atg.wa.gov
  • Phone: 1-800-551-4636
  • Online complaint form: atg.wa.gov/file-complaint

17. Contact

  • MHMDA requests: [email protected] (subject "Consumer Health Data Request")
  • Appeals: [email protected] (subject "Appeal Request")
  • Postal: Yeshan Healthtech, LLC, 5205 Congress Ave APT 524, Boca Raton, Florida 33487-3905, United States

Yeshan Healthtech, LLC (MediFinder) — Consumer Health Data Privacy Notice (Washington MHMDA)

medifinder.com · [email protected] · Published 19 May 2026