Security
Private by design.
Your records are stored encrypted on your iPhone. Here is what that means, and what is sent when you use a premium feature.
In short
Stored encrypted on your iPhone
Your records are stored encrypted on your iPhone. Encrypted backups are kept so you can restore them on a new phone.
Processed only while premium is active
While premium is active, a copy of the data each feature needs is processed on our servers, including a few features that run on their own, like a daily review. We remove names and identifiers before anything goes to our AI provider, except photos and pages you choose to send, and we can't control what a provider does with the data it receives.
Your DNA file stays on your phone
The raw genetic file you import is read and kept only on the phone you imported it on. It is never uploaded, synced or included in a backup.
We never sell your data
We never sell your data. Further Health doesn't use it to train AI models, and we don't run advertising or analytics cookies on this site.
The details, explained
- Encryption
- Your records are encrypted with AES-256-GCM, a widely used standard for encrypting data. Each field is encrypted separately.
- Your key
- The key that unlocks your records is made from your passcode with Argon2id, a method designed to make passcodes slow to guess. The key that protects your data and the key that protects that key are kept separate, so changing your passcode is quick.
- The privacy filter
- Before a premium feature sends anything, a rule-based filter removes direct identifiers such as your name, date of birth and contact details. Rule-based means the same input always gives the same result. A second automated check looks for anything the rules missed, and if either finds something it can't remove, nothing is sent.
- Backups and sync
- Backups and sync between your devices are encrypted on the phone before they leave it, and the keys stay on your devices, so our servers can't read them.
- In transit
- Network connections are encrypted with TLS 1.2 or newer.
The company
- Distributed through Apple
- The iPhone app is signed by us and installs through Apple TestFlight.
- Companies that help run the service
- The companies that host and run parts of the service, and what each one handles, are listed in our Privacy Policy.
- HIPAA
- Further Health is a consumer wellness product, so HIPAA doesn't apply to us as a covered entity or business associate. Your data is protected by our Privacy Policy and by consumer health privacy laws.
- Report a security issue
- Email privacy@further.health. We will respond promptly.