RepCase

Consumer health data privacy policy

Effective 17 August 2026

This policy is published separately from our general privacy policy to meet Washington's My Health My Data Act and Nevada's SB 370. It covers only data that may qualify as "consumer health data" under those laws. Everything else we handle is described in the general policy.

RepCase is not a medical record. It is a tool used by medical device sales representatives to track which products were used in a surgical case, for billing and inventory. We do not ask for or store patient names, dates of birth or medical record numbers, and bill sheet images are redacted on the representative's device before upload.

1. What we collect that may qualify

We collect no information directly from patients. A case record entered by a representative contains the following, which we treat as potentially health-related because it describes a health care procedure:

None of this names an individual. We recognise, however, that a lot or serial number combined with a facility and a date could in principle be matched against records held by someone else, so we do not treat it as anonymous.

2. Where it comes from

Every item above is entered into the App by the sales representative using it, or extracted from a bill sheet photograph they chose to scan. We collect none of it from patients, from hospitals, from data brokers, or from any other outside source.

3. Why we collect it

Solely to provide the App's features to the representative who entered it: recording which products were used, generating the vendor billing email they send, tracking inventory against a case, and reporting on their own activity. We do not use it for advertising, profiling, or any purpose unrelated to those features.

4. Who we share it with

We do not sell consumer health data. We have not sold consumer health data. We share it only with the service providers required to run the App, each acting on our instructions:

When a representative emails a bill sheet to a device vendor, that vendor receives it. That is the purpose of the feature, and the representative chooses the recipients and confirms them before sending.

We do not attempt to re-identify any individual from this data, and we require the providers above not to do so either.

5. Your rights

If you are a Washington or Nevada resident, you have the right to:

A representative using the App can delete any case record at any time, and can delete their entire account and all of its data from Settings, which removes everything described here.

Anyone else — including a patient who believes a document relating to them was processed — may contact support@repcase.io. We will respond within 45 days, and will tell you if we need a further 45 days and why. There is no charge. We will not treat you differently for making a request.

If we deny a request, you may appeal by replying to our response. If the appeal is denied, you may complain to the Washington Attorney General or the Nevada Attorney General.

6. How long we keep it

For as long as the representative's account is active. When they delete their account it is deleted immediately, other than copies that may persist briefly in our hosting provider's encrypted backups until those expire on their normal schedule, and any bill sheet already emailed to a vendor, which is in that vendor's inbox and beyond our reach.

7. Contact

RepCase — support@repcase.io

8. Changes

We will post any changes to this policy on this page and update the effective date above.