Data Deletion Request
Last updated: August 26, 2026
Your Right to Delete Your Data
You may request that HAI Compass permanently delete all data associated with your account at any time, for any reason, at no cost. This page describes what will be deleted, how to request deletion, and how long the process takes.
What Will Be Deleted
A deletion request removes all of the following data from our cloud infrastructure:
- Your authenticated user account and unique identifier
- Pump registration data (hashed serial number, implant date, care team contacts, flow rate)
- Refill visit records
- Symptom logs and urgent flag history
- Lab values and trend data — both values you entered by hand and values imported from a connected health record
- Travel logs and altitude history
- Any feedback you submitted from within the App
- Our pseudonymous product-usage events associated with your account
- Provider dosing calculations, patient records, and encrypted patient-name entries (provider accounts only)
- Companion pairings you have created
- Push notification tokens for your devices
Note on local-only data. The name you enter on your own device card and your full pump serial number are stored only in the operating system keychain (Secure Storage) on your own device — they are never stored in our cloud. To remove this local data, sign out or delete your account in the App — that wipes it from the device immediately. On Android, uninstalling the App also removes it. On iOS, the operating system can keep keychain entries even after the App is uninstalled, so use in-App sign-out or account deletion first when retiring or handing off a device.
Note for clinician accounts. The patient names a clinician types into their own patient panel are kept in the clinician's device keychain and, so the panel stays consistent across the clinician's devices, are also synced to our database in encrypted form only — each name is encrypted on our servers (AES-256-GCM) before storage, and only the clinician who entered it can retrieve it. These encrypted entries are deleted as part of the clinician's account deletion, along with dosing calculations and patient records.
Note on Electronic Health Record data. If you connected your MyChart or other EHR account, lab values you imported are part of your HAI Compass lab record and are deleted when you delete your account, along with your other lab entries. Imaging summaries, your health system's internal identifiers, and your sign-in tokens are kept only on your device and are removed at the same time; your name from your chart was never stored, on your device or ours. When you delete your account we also ask your health system to cancel the App's access. Most systems support this, but we cannot guarantee it succeeds — if you want to be certain, you can remove the App's access yourself from inside your MyChart account at any time. You can disconnect the EHR separately, without deleting your account, from the App's My Records screen — this stops further importing and clears the device copy, but lab values already imported remain in your record unless you choose to remove them.
How to Request Deletion
Option 1: From within the App (fastest)
The App exposes deletion in two equivalent places — use whichever you find first:
- Open HAI Compass on your device.
- Either:
- Patient track: tap More (bottom tab) → scroll to Data & Privacy → tap Delete your account and app data. (Or open Account Settings from the same More tab and tap Delete your account and app data at the bottom.)
- Provider track: tap Settings (bottom tab) → Delete your account and app data.
- Confirm the deletion. Your data is removed immediately and you are signed out.
Option 2: Email request
If you cannot access the App, email haicompassapp@gmail.com with the subject line "Data Deletion Request" and include:
- The email address associated with your account (if you linked one)
- The approximate date you first started using the App
- Any other information that can help us identify your account
We will process email requests within 30 days and confirm completion via reply.
Option 3: Uninstall the App
Uninstalling the App removes locally stored app data on Android. On iOS, entries kept in the operating system keychain (patient names, full pump serial numbers, authentication tokens) can persist after the App is uninstalled — sign out or delete your account in the App before uninstalling to actively wipe them. Cloud data will remain until you submit a deletion request via Option 1 or 2.
Processing Time
- In-app deletion: immediate — data is removed within seconds and you are signed out
- Email request: within 30 days of receipt
- Backup retention: we keep encrypted daily backups of the database for 30 days so that we can recover from an outage (rarely, a backup taken by hand around a data migration is kept for up to 180 days). Deleted data can remain inside those backups until they expire. If we ever restore from a backup, we re-apply every deletion recorded since that backup before the restored data is used, so a deleted account does not come back. Backups are encrypted and stored under the same HIPAA agreement as the live database; they are not used for anything except recoveryypted backup media.
What Deletion Removes — and the Few Limits
Deleting your account removes your account record and all data linked to it, including your refill history, symptom entries, lab entries, travel logs, pump registration, any feedback you submitted, and our pseudonymous product-usage events for your account. On your device, deletion also clears local data (patient names, full pump serial numbers, authentication tokens, and any cached electronic health record results).
The only limits are:
- Encrypted backups we keep for recovery, for 30 days (up to 180 days for a hand-taken migration backup), which expire automatically and are never restored without re-applying recorded deletions (see Processing Time above).
- Aggregated or de-linked statistics that already contain no identifier and cannot be traced to you individually.