Trust
How we handle your health data
Your health data stays under your control. You decide what is shared, with whom, and for how long. This page explains how Amara protects your records, where they are stored, and what we claim and do not claim, so you can judge for yourself.
Last reviewed
Amara Health, a product of MetaNova AI Private Limited, Hyderabad.
On record
- ABDM Sandbox
- ABDM Sandbox milestones M1 and M2 complete. M3 evaluation active.
- Hospital pilot
- Pilot under way with Anil Neerukonda Hospital, Visakhapatnam (920 beds).
- Recognition
- DPIIT-recognised startup.
- Data residency
- Your records stay in Indian cloud infrastructure.
Security
How is my data protected?
Amara protects your records in four ways: encryption wherever they are stored or sent, storage in Indian cloud infrastructure, sharing only with the doctors or clinics you approve and only for as long as you allow, and deletion of any report or your whole account whenever you want.
- Encrypted at rest with AES-256 and in transit with TLS 1.3.
- Your records stay in Indian cloud infrastructure.
- You explicitly approve which doctor or clinic sees your history, for how long, and you can revoke access at any time.
- Delete any report, or your whole account, whenever you want.
India regulatory status
Where does Amara stand with the DPDP Act and ABDM?
Amara is built for India's DPDP Act, the Digital Personal Data Protection Act, 2023, which sets how personal data in India is collected and used. In the ABDM Sandbox, milestones M1 and M2 are complete and the M3 evaluation is active.
Built for India's DPDP Act.
ABDM Sandbox milestones M1 and M2 complete for the specified health repository and health ID linking modules. M3 evaluation active.
Ayushman Bharat Digital Mission (ABDM)In plain words
What we claim, and what we do not
Trust in a health product should rest on what can be shown, not on badges. We say what Amara is built for, what has been completed in the ABDM Sandbox, and where no third party has yet checked our work. Where we have no proof, we say so.
We are not HIPAA, SOC 2, ISO 27001 or GDPR certified, and we do not claim to be.
No third party has audited our architecture. When one has, we will say who and when.
We are built for India's DPDP Act. We are not certified to it, because no such certification exists.
Amara is not a medical device and does not diagnose.
We publish no accuracy percentage, because we have not measured one in a way we would be willing to defend.
Amara never sells your health data. Not to insurers, not to advertisers, not to anyone.
About
Who builds Amara?
Amara Health is built by MetaNova AI Private Limited, a software and AI company in Hyderabad, India, registered in India and run from Hyderabad. DPIIT-recognised startup. CIN available on request. Amara is its health memory product for people, labs, hospitals, clinics and employers in India.
Our mission is to make patient history easy to access, understand and verify, so clinicians spend less time searching through records and more time doing what they do best: diagnose and care for patients.
Contact
Ask us about your data
If you have a question about how your data is handled, want a report or your account deleted, or need our grievance officer, write to us here. We reply by email, and we use what you write only to answer you.
Grievance Officer, MetaNova AI Private Limited
Hyderabad, Telangana, India