Member protections
Your data rights
The commitments in our Privacy Policy, in plain terms. The Privacy Policy is the full version, and it controls if the two ever differ.
The Xanadu app is not yet open to the public; these commitments apply to the app when it launches. This site sets no cookies, runs no analytics, and collects no data about you beyond what you explicitly provide. Last updated September 16, 2026.
The six commitments
What Xanadu commits to you
Your health data belongs to you. Using Xanadu never transfers ownership to us. We never sell your data, and we never share it with anyone unless you direct it.
You can export your records from the app at any time in FHIR R4, the standard format other health apps and systems can read. No support request and no waiting period.
You can delete your account from the app or by emailing privacy@yourdata.health. We complete deletion within 30 days, and any sharing or research lease you granted ends immediately.
Consent to store your records is separate from consent to share them. Research participation is off by default. You opt in one study at a time, see its terms before you accept, and can revoke at any time.
The app keeps a record on your phone of important events, such as sign-ins, imports, exports, and backups, that you can review in Settings. It stays on your device and is never uploaded to us.
If you choose to take part in research, you lease de-identified data to one named study for a stated purpose and time. The study must delete it when the lease ends and may never try to identify you. Any payment to you is shown before you accept.
Legal framework
The laws behind your rights
Xanadu is designed to meet the most protective health data privacy laws in the United States, and to give everyone those rights no matter where they live.
Washington State's My Health My Data Act covers health data held by apps and services that HIPAA does not reach. It requires separate consent to collect and to share consumer health data, and it bans geofencing around places where people get health care. The Xanadu app does not collect your location.
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives consumers the right to know what data is collected, to delete it, to opt out of its sale, and to limit use of sensitive personal information. We offer these rights to every member.
Your healthcare providers are covered by HIPAA. When you direct a copy of your records into your own vault, that copy is generally no longer governed by HIPAA. It is protected instead by our Privacy Policy, our commitments to you, and consumer health privacy laws such as those above.
Special protections
Your most sensitive data gets extra protection
Mental health data is among the most sensitive health information, and it has been misused before (the Federal Trade Commission took action against BetterHelp and Cerebral). These categories get stronger rules for research.
- Never included in any research lease unless you give a separate, explicit opt-in for it.
- Never combined with other data for research without that separate consent.
- Genetic and genomic data
- Reproductive and sexual health data
- Substance use and recovery records
- Biometric data
Each requires its own explicit opt-in before it can be part of any research lease.
These rights apply from day one.
Join the waitlist to be among the first members when the app opens.
Join the waitlist