Privacy Policy
What we collect about you
Your email address (to sign you in), your NPI and the public registry details tied to it (name, credential, and specialty, used only to verify you), an optional display name, your home department, and your settings.
What's public
Entries you post: the lab, value, year, age range, outcome, emergency department, and city and state. Your display name appears only on entries where you choose to show it. A "seen by" name appears if you add one.
What's never public
Your email address and NPI are never shown on the Site.
No patient information
The Site is designed not to collect patient information, and our Terms forbid posting it. If you see anything that could identify a patient, report it or email us and we'll remove it.
How we use your information
To run the Site: signing you in, verifying you, showing leaderboards, sending sign-in codes, and sending record alerts if you have them turned on (you can turn them off in Settings). We don't sell your information, and we don't use advertising trackers.
Service providers
We use Supabase (database and sign-in), Vercel (hosting), Resend (email), and Cloudflare (domain). They process data only to provide their services. The NPI check uses the public NPPES registry run by CMS.
Cookies
We use only the cookies needed to keep you signed in.
Your choices
You can delete your own entries anytime from the Post a lab page, and change your settings anytime. To delete your account entirely, email privacy@redrawlabs.com.
Changes and contact
We'll post any changes here. Questions: privacy@redrawlabs.com.