Our Holistic Approach to Privacy
What we mean when we say "privacy-first"
aboboTech was born from the escalation of attacks on bodily autonomy and the recognition that data privacy has never mattered more.
We went back to basics: what does privacy actually mean? We learned quickly that different people mean different things by it, depending on where they sit.
Rather than pick one, we built for all of them.
Privacy everyone can feel good about
Privacy doesn't mean the same thing to a patient, a clinic, and a world watching both. So we built for all three needs.
Data privacy in our work requires intentional design at every level.
Three Layers of Privacy
Patient privacy
Protection that holds up in your own home.
Single-use form links start from an innocuous URL and, once submitted, resolve to a page stripped of clinic branding — one that neither confirms nor denies a form ever existed. A partner scrolling through browser history finds nothing.
And there's no app to download to avoid an app store record and reduce barriers.
Clinic privacy
One tool instead of ten — less data, fewer places it can leak.
Most clinics juggle a stack of tools, with patient data scattered across vendors. We combined the most-used ones into a single suite for a smaller data footprint. Convenient and private. Yay!
We might skip a niche feature or two. We think that's a fair trade.
Anti-surveillance
Designed to collect as little data as possible.
The most sensitive patient health information is end-to-end encrypted, meaning we literally cannot read it. All other patient data is encrypted at rest and in transit, and we access only what's essential to operate the platform.
No tracking pixels, no location data, no browsing history.
The safest data is the data we don't have or can't read
Because the best way to protect sensitive data is to never have access to it in the first place.
The data we chose not to have:
Location Data
In our product, we do not store IP addresses, GPS, or geolocation tracking
Browsing History
No tracking pixels or cross-site tracking
Search Queries
We don't log what patients search for
Trackers
No advertising trackers. Only essential cookies for authentication and security
Data Brokers
No data broker integrations
Device Fingerprinting
No device profiles or cross-device tracking
Metadata
Minimal collection, no data profiling
Legal Framework & Compliance
HIPAA Privacy Rule
We sign Business Associate Agreements (BAAs) with our clinic partners and maintain the technical, physical, and administrative safeguards HIPAA requires for protected health information.
State Privacy Laws
We monitor and work to comply with evolving state privacy laws, including restrictions on data sharing and requirements for patient consent. We implement privacy protections designed to exceed minimum legal requirements where possible.
Patient Data Protection
We do not sell or rent patient data to third parties. We do not share patient data for marketing or advertising purposes. Patient data is shared only with authorized service providers under strict contractual protections (Business Associate Agreements) as necessary to provide our services.
Legal Requests for Data
The most sensitive patient data is end-to-end encrypted, so we cannot produce it in readable form. For everything else, we notify affected clinics when legally permitted, engage legal counsel to evaluate requests for validity and scope, may challenge requests that are overly broad or legally insufficient, and disclose only the minimum we are legally compelled to. We'll coordinate with your clinic's legal team whenever possible.
What this website itself collects
We practice what we preach, starting with this very page. This marketing site runs minimal, first-party-configured analytics (PostHog) to understand which pages and links help people — basic page views and interactions, nothing more. Session recording is disabled, we honor your browser's Do Not Track and Global Privacy Control (GPC) signals, and there are no advertising trackers, no cross-site tracking, and no data brokers. If your browser blocks analytics, everything here still works.
Questions?
We're happy to discuss our privacy practices in detail. Whether you're evaluating software or just want to understand how we protect patient data, we're here to help.