Trust, security and compliance

1. The short version

We do not claim HIPAA compliance, SOC 2 compliance or any certification. We have not been audited by an outside firm. This page tells you what is true today, so you can decide for yourself.

2. Compliance status, plainly

• HIPAA. Kidney Navigator is a tool you fill in yourself. It is not run by your doctor or insurer, so HIPAA generally does not apply to it, and we do not say it is “HIPAA compliant.” Before any clinic receives or sees patient information through Kidney Navigator, a signed business associate agreement and a security review would come first.
• SOC 2 and SOC 3. These are reports written by an independent auditor. We do not have one. We will not say we are SOC 2 compliant until a report exists. It is a planned goal.
• Independent security review. The optional encrypted sync has not yet been reviewed by an outside security firm. Until it is, treat our description of it as our own statement, not as a third-party verdict.
• Medical device rules. Kidney Navigator is for tracking and education. It does not diagnose, treat or tell you to change a medicine.

3. What we do today

• Local by default. What you enter stays in your browser on your device unless you turn on optional sync.
• No tracking inside the app. On October 9, 2026 we loaded the app in a clean browser and it contacted only kidneynav.com. No ad, analytics or social tracking code runs in the app.
• Optional encrypted sync. Sync data is encrypted in your browser before it is uploaded. We cannot read it, and we cannot recover your recovery phrase.
• Payments go through Stripe. If Premium opens, you enter your card on Stripe’s own page. Your card details never touch our servers. Payment events are checked for a valid signature before we act on them.
• You are in control. You can download a copy of your information, erase it from your device, lock the app with a PIN, and share a read-only link that stops opening after 72 hours. That link is a convenience, not a lock.
• Voice entry and read-aloud. If you tap Dictate, your browser may send the audio to its own speech service (Google for Chrome, Apple for Safari) to turn it into text. Read aloud uses your device’s voices, and some browsers use an online voice. Neither is used unless you tap it.
• Report a problem. Email michael@mavtg.com. Our security contact file is public.

4. Sign-in and two-step verification

If you use optional sync, you sign in with a one-time code we email you. The sign-in session is kept in a protected cookie that expires after 7 days. That is one sign-in step. We do not yet offer a second step such as a passkey or authenticator app. It is planned. The app PIN is separate and only locks the app on your device.

5. Website analytics: off unless you allow it

On October 9, 2026 we removed Google Analytics and our own visitor-tracking script from the Kidney Navigator pages. On October 15, 2026 we added an optional choice on three public pages only: the home page, this Trust page and the white paper. Nothing loads until you choose Allow analytics. If you allow it, we count page visits with Google Analytics (ad features off) and see which organizations visit, never you personally. If you allow it, we also add up anonymous page-speed numbers in our own counters, with no cookie and nothing that identifies you. We use these counts to improve the site and for our own research. The app, the tool pages and the Spanish pages never load analytics, advertising or tracking code, and no health information is ever sent. Our hosting provider still keeps standard server logs, described on the Privacy page. Change my analytics choice

Accessibility

We aim to meet WCAG 2.2 Level AA. On October 9, 2026 we ran an automated check (axe-core, WCAG 2.0 to 2.2 A and AA rules) on the five app tabs and eight public pages and it found no violations. Automated tools find only part of the problems, and we have not yet done a manual screen-reader and keyboard review, so some parts of the app may still fall short. The app offers large text, high contrast, and read-aloud. If you meet a barrier, email michael@mavtg.com and we will reply within 2 business days.

6. What we are working toward

• A written legal review of how federal and state health-privacy and consumer-protection laws apply, before Premium billing opens.
• An independent security review of encrypted sync.
• Passkey sign-in as an optional second step.
• A SOC 2 audit when an organization needs one, with the report summary published here only after it exists.

7. Related pages

Privacy · Terms of Use · Help