Your lookups are your business.

1. Who we are
2. What we collect: only what you send us
3. What stays on your device
4. Network requests the app makes
5. Camera, photos, and calendar
6. Apple services
7. This website and email
8. Features on the roadmap
9. Patient information and HIPAA
10. Children
11. Your rights and choices
12. Security
13. Changes to this policy
14. Contact

1. Who we are

Sig is published and operated by HARRIS CLINICAL SOFTWARE LLC, an Arkansas limited liability company (“Harris Clinical Software”, “we”, “us”, “our”). HARRIS CLINICAL SOFTWARE LLC is the data controller for the limited information described below and is the only party to this policy; no individual owner, member, officer, or contributor is a party to it or is responsible under it. Sig's clinical content is written and reviewed by a licensed pharmacist acting for the company.

This policy covers the Sig app for iPhone and iPad (the “App”), including TestFlight beta builds, and the website at get-sig.app (the “Site”). It is written for the pharmacists, pharmacy technicians, and students who use Sig; Sig is not intended for patients.

2. What we collect: only what you send us

We cannot see what you look up, what you type into a calculator, which drugs you favorite, or how often you open the App. Nothing in the App links a search or a lookup to you. The only information we ever receive from you is what you choose to send us yourself: a problem report (below) or an email to support (section 7).

Sig will not ask you to create an account

This is a commitment, not just a description of today. Sig has no sign-in and no user accounts, and the features on our roadmap are built so that it never needs them. Your subscription, if you buy one, and your favorites and settings, if you sync them, both travel with your Apple Account through Apple's own systems, not through an account with us. Concretely:

• Subscriptions follow your Apple Account. Apple's In-App Purchase records the entitlement against the Apple Account that bought it, and the App reads it on any device signed in to that account. There is nothing to sign in to and, in the ordinary case, nothing to tap. A Restore Purchases control is there as a fallback.
• Sync uses your private iCloud database, not our server. Favorites, settings, and anything similar we add later would sync through the private database inside your own iCloud account. Apple encrypts it, it counts against your iCloud storage rather than ours, and we cannot read it; we have no more access to it than any stranger does. We operate no server that holds your data.
• No Sign in with Apple, and no other login. We do not offer Sign in with Apple, social login, email-and-password, or any other sign-in, because none of them is necessary for anything Sig does or plans to do. If that ever changed, any sign-in would be optional, would be explained before you used it, and this policy and the App Store privacy label would be updated first.

The practical effect is that there is no Sig account to be breached, sold, subpoenaed, or handed to anyone, because no such account exists.

Report a Problem

Every screen of the App has a Report a Problem button for reporting inaccurate information, a formatting error, or anything else. Tapping it opens a form; nothing is sent until you tap Send, and Cancel discards everything. The form shows you each item before it is sent:

• Your description and the type of problem you chose. Do not include information that identifies a patient.
• An optional screenshot. When you tap the button, the App captures an image of the screen you were on so we can see the problem. The image is held in memory, shown to you in the form, and is never saved to your photo library. A switch in the form removes it from the report. Turn it off if the screen shows values you entered for a patient. If you include it, the App writes an encrypted temporary copy for the upload and deletes that copy as soon as the upload ends.
• Technical details: the page you were on (for example, the tab and the drug or condition open), the App version and build, whether the App's reference content came with this version or in a later content update (section 6), the iOS or iPadOS version, and whether the device is an iPhone or an iPad.

Before a report leaves your device, the App encrypts all of it (the description, the screen name, the technical details, and the screenshot) with a key that only we hold. Reports are then stored in the App's Apple CloudKit database, which Apple operates. What the database holds is unreadable without our key: Apple cannot read it, other users cannot read it, and neither can anyone who obtains the database. The only things visible without the key are that a report exists and when it was sent. We decrypt reports on our own computer. Sending a report requires that the device be signed in to iCloud. We do not receive your name, email address, or Apple Account. Apple attaches an opaque identifier, specific to this App, to each CloudKit record; we cannot use it to learn who you are, and we would use it only to stop abuse. We use reports only to find and fix the problem reported. We delete a report when the problem is resolved, and in any case within 12 months. To have a report deleted sooner, email us the approximate time you sent it and what it said.

If the device is not signed in to iCloud, the form offers to open an email to us instead. The email contains your description and the technical details, not the screenshot, and section 7 applies to it.

3. What stays on your device

The App keeps a small amount of information on your device so it works the way you left it. None of it is transmitted to us.

• Clinical inputs. Values you enter into calculators, Dose Adjustment, and Antibiotic Selection (weight, creatinine, age, allergies, cultures, and so on) are held in memory while you use the tool and are discarded when you leave it. The App never sends them anywhere on its own. The one way they can leave the device is a problem-report screenshot of a screen that shows them, which you see before sending and can remove (section 2).
• Local antibiogram. If you enter your institution's susceptibility rates, they are saved on the device, marked as institutional data rather than patient data, and can be cleared from the same screen.
• Preferences. Your favorite drugs, dashboard card order, tab arrangement, and up to five recent drug searches are stored in the App's own settings storage. Recent searches have a Clear control.
• Cached reference data. The App caches public reference data it has fetched, such as the RxNorm drug index, so it works offline. This is public drug information, not information about you.
• Widgets and controls. Sig's widgets and Control Center controls read what they show (such as your favorite drugs, recent FDA updates, or the next healthcare observance) from storage the App shares only with its own widgets on the same device. That storage never leaves the device.
• Optional UMLS key. If you add your own Unified Medical Language System API key to unlock value-set lookups, it is stored in the iOS Keychain and sent only to the National Library of Medicine service that requires it.

Deleting the App deletes all of this. Your device backups (iCloud or computer backups managed by Apple) may include the App's settings storage under Apple's backup rules; we have no access to your backups.

4. Network requests the App makes

Sig's bundled content works in airplane mode. When you look up a drug, label, price, or code that is not bundled, the App sends that query directly from your device to the public service that holds the answer. The request carries the drug name, NDC, code, or identifier you asked about, plus the standard technical information any web request carries (your IP address and a generic App identifier). It never carries your name, an account, a patient identifier, or anything you typed into a calculator.

Apart from Apple's own services (CloudKit, which receives a problem report when you send one, section 2, and the content updates described in section 6), these are the only services the App contacts, and each is operated by a United States government agency with its own privacy policy:

We do not operate a server that sits between you and these services, we do not proxy or log these requests, and we receive nothing from them. If a service is unreachable, the App shows bundled content or an honest “not available” state rather than sending the request anywhere else.

Links to other websites. Many pages link to the source behind what they show, such as a journal article, an FDA or DEA page, or a manufacturer's program. Tapping a link opens it in your browser, which then connects to that site under the site's own privacy policy. The App sends that site nothing beyond the address you tapped. We are not responsible for the privacy practices of sites we link to.

Sharing. Calculators and tools have a Share button. Share Result writes the result and the values you entered into text, and Share Link makes a get-sig.app address that opens the same tool; neither contains your name or a patient identifier unless you typed one into an input. Either goes only where you send it through Apple's share sheet; the App sends nothing to us when you share. Someone who opens a link loads a page from this website (section 7). Check a shared result before you send it, because it carries the values you entered.

5. Camera, photos, and calendar

Scan & Identify, Pill Identifier, and Pill Counter use the camera, or a photo you choose, to read a barcode or a tablet imprint or to count tablets. Images are analyzed on the device using Apple's on-device frameworks and an on-device counting model, and are never saved, uploaded, or shared. The App asks for camera and photo library permission only when you open those features, and you can revoke either at any time in iOS Settings.

Healthcare Observances can add an observance to your calendar. Add to Calendar opens Apple's own event editor, filled in with the observance's name and dates; the event is saved only if you tap Add, and the App is never given access to read or change your calendars, so it does not ask for calendar permission. The calendar file export is a file you choose where to send through the share sheet.

6. Apple services

• App Store and TestFlight. Apple processes your download and, in beta, your TestFlight enrollment under Apple's own privacy policy. If you send feedback or a crash report through TestFlight, Apple shares that feedback with us together with the information Apple attaches to it (such as device model, iOS version, and, for feedback you type, your tester email). We use it only to fix the problem you reported, and we delete it from App Store Connect when the problem is resolved and in any case within 12 months.
• Crash and usage analytics. Apple offers you a system-wide choice (Settings › Privacy & Security › Analytics & Improvements) to share analytics with developers. If you opt in, Apple sends us aggregated, de-identified crash and usage statistics. We add no analytics of our own.
• iCloud. The App uses Apple CloudKit for one purpose: storing the problem reports you send (section 2). Apple processes that data as our service provider under its own privacy policy. Apple is the only third party the App shares information with, and because each report is encrypted with a key only we hold before it leaves your device, Apple cannot read it: reports receive at least the protection this policy describes while Apple stores them. The App does not sync or store anything else in iCloud. Section 8 describes planned features that would, and how.
• Content updates. Corrections to the App's reference content can arrive as a content update that Apple hosts and the App downloads through Apple's Background Assets service, so they reach you without a new version of the App. The download comes from Apple, under Apple's privacy policy, like the App itself; it carries nothing you typed or looked up, and we receive nothing from it. The App checks each update's signature before using it and otherwise keeps the content it shipped with.
• Siri, Shortcuts, and Spotlight. The App adds the names of its bundled drugs, conditions, guidelines, and tools to this device's Spotlight index so searches can find them. Nothing you type or look up is added, and nothing is sent to us. Directions, quantities, and DEA numbers you give Siri or Shortcuts are used for that one answer and are not saved by the App, and Siri does not read doses or directions aloud from the App: they are shown on screen. What you say to Siri is processed by Apple under Apple's own privacy policy.

7. This website and email

• Hosting. The Site is a static site hosted by Vercel. Like any web host, Vercel processes the technical details of each request (IP address, browser type, requested page) to deliver the page and protect the service, under Vercel's privacy policy. We have not enabled analytics on the Site and we set no cookies of our own.
• Fonts and scripts. The Site uses the fonts already on your device. On a device without Apple's or Helvetica fonts, it loads one font file from get-sig.app itself. It loads nothing from any other company's servers.
• Email. When you email support@get-sig.app, including to join the beta waitlist, we receive your email address and whatever you write. We keep it in our mailbox to reply, invite you to TestFlight, and follow up about the App. We do not add you to any marketing list. We delete a conversation within 24 months of its last message, or sooner if you ask.

8. Features on the roadmap

Sig's public roadmap includes features that would handle a little more data than today's App does. None of them exist yet, and none of them requires an account (see section 2). Before any of them ships, this policy will be updated, the App Store privacy label will be revised, and the feature itself will state what it sends. This is what is planned, so you can judge it now:

• Comments. Practice notes attached to a monograph, shown anonymously. They would be stored in the App's CloudKit database with the same opaque identifier described in section 2, which we would retain only to honor reports, blocks, and takedowns as Apple's App Store guidelines on user-generated content require.
• Sig Pro. An optional subscription sold through Apple's In-App Purchase, with no account and no sign-in. Apple handles payment; we never see your card, billing address, or Apple Account. The entitlement is recorded by Apple against the Apple Account that bought it and is read by the App on any device signed in to that account, so a subscription works across your devices without you doing anything. Restore Purchases is available as a fallback.
• Watchlists and alerts. Shortage and recall notifications for drugs you choose to follow. Delivering a push notification requires Apple's notification service to hold a device token; the list of drugs you follow would stay on your device or in your private iCloud database, which we cannot read.
• Cross-device sync. Favorites and preferences synced through the private database in your own iCloud account, with no account and no sign-in: if your devices are signed in to the same Apple Account, they simply agree. That data belongs to your Apple Account, is encrypted by Apple, counts against your iCloud storage rather than ours, and is not accessible to us. Turning off iCloud for Sig in iOS Settings stops the sync and leaves the App fully usable on each device on its own.
• Ask Sig. Natural-language answers assembled from Sig's cited fields using Apple's on-device Foundation Models. Prompts would be processed on your device (or, where Apple routes them, Apple's Private Cloud Compute under Apple's terms) and would not be sent to us.

9. Patient information and HIPAA

Sig is a reference tool, not a record-keeping system. Do not enter names, dates of birth, medical record numbers, or other information that identifies a patient. Clinical values you enter to run a calculation are processed on your device only, are not stored after you leave the tool, and are never transmitted by the App on its own. Before you send a problem report, check the screenshot preview and turn the screenshot off if it shows patient values; do not type patient information into the description. Because Sig is not designed to receive protected health information and we do not ask for it, we are not a covered entity or a business associate under the Health Insurance Portability and Accountability Act, and we do not enter into business associate agreements. If your employer's policies govern which tools you may use with patient data, follow them.

10. Children

Sig is a professional tool intended for adults. It is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has sent us personal information, email us and we will delete it.

11. Your rights and choices

Because the App collects nothing on its own, most privacy rights are satisfied by design: there is no profile to access, correct, export, or delete, and nothing to opt out of. What we do hold is limited to problem reports and email you have sent us. You may ask us at any time to tell you what we hold about you, correct it, or delete it, and we will do so within 30 days.

• California residents. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding twelve months. We do not use or disclose sensitive personal information. You may exercise your rights to know, delete, and correct by emailing us; we will not discriminate against you for doing so.
• Residents of the European Economic Area, the United Kingdom, and Switzerland. Where we process your problem reports and email correspondence, our legal basis is our legitimate interest in fixing the App and responding to you, or your consent where you ask to join the beta. Sig is operated from the United States, so reports and email are processed there. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority.
• Everyone. You can revoke camera and photo permissions, clear recent searches, clear the local antibiogram, and delete the App at any time. Deleting the App removes all of its on-device data.

12. Security

All network requests use HTTPS. The optional UMLS key is stored in the iOS Keychain, which is encrypted by the device. On-device data is protected by your device passcode and Apple's data-protection features. Problem reports are encrypted in transit and at rest by Apple CloudKit, are readable only by us, and the temporary screenshot copy made for an upload is encrypted on the device and deleted when the upload ends. We operate no server of our own.

13. Changes to this policy

We will update this policy whenever the facts change, and always before a feature that changes the answer ships. The effective date at the top tells you which version you are reading, and material changes will be noted in the App's release notes. Continued use of the App after a change means you accept the updated policy.

14. Contact

Questions, privacy requests, and complaints go to support@get-sig.app, which reaches the company directly.

HARRIS CLINICAL SOFTWARE LLC is the controller of the information described in this policy. Address correspondence to the company, not to any individual.