How we handle your data
What we do and don't do with your information.
We do
- Use sample codes, not names, as the only identifier
- Dispose of samples by incineration after 90 days
- Replace encrypted backups every 90 days
- Publish a budget and transparency report every quarter
- Publish a warrant canary every quarter
- Encourage you to use a pseudonym
- Accept mail with no return address
We don't
- Ask for legal names, birthdates or medical history
- Use third-party analytics or tracking cookies
- Sell, trade or share data with anyone
- Keep contact details after we've notified you
- Photograph or scan envelopes or labels
- Keep IP logs for more than 24 hours
- Give medical advice, prescriptions or diagnoses
A note on security
No system is completely secure. We've designed ours so that if our servers were ever compromised, there would be very little to find: sample codes, results and chromatograms.
For the most privacy, mail your sample from a mailbox that isn't yours, use a pseudonym, and don't sign up for notifications.