Delete Your PHI Account
This page explains how to permanently delete your Personal Health Inspector (PHI) account and data. It is available to everyone, whether or not you're signed in.
Uninstalling the app does not delete your account. PHI stores your account and health-organization data on our servers, not just on your device, so removing the app from your phone leaves your account and data intact. To actually delete your account, follow one of the steps below.
How to request deletion
There are two ways to delete your account, depending on whether you can currently sign in.
If you can sign in
- Sign in and go to Settings → Privacy & Data.
- Under "Delete account," select Delete my account.
- Type DELETE to confirm, then submit. Deletion happens immediately and can't be undone.
If you can't sign in
Enter the email address on your account below. We'll send a link to confirm — it's a single-use link that expires in an hour, so only someone with access to that inbox can delete the account.
Trouble with this, or no access to that inbox anymore? Use our Contact page instead and we'll verify it's you another way.
What gets deleted
Requesting deletion permanently removes, from our database:
- Your profiles, appointments, medications, and preventive-care tasks
- Uploaded documents, including the stored files themselves
- Emergency-profile details, trusted contacts, and caregiver access/invitations
- Your subscription record — any active paid subscription is also cancelled with Stripe, so you won't be billed again
- Your account's name, email address, and password
This is permanent and can't be reversed once it's done.
What may be retained, and why
A small amount of information is kept after deletion, for specific operational or legal reasons:
- An anonymized account record. Instead of erasing the account row outright, we strip it of every identifying field (name, email, password) and replace them with random, non-identifying values. This anonymized stub exists only so that our internal security audit log — which records sensitive actions like this deletion — stays internally consistent; it no longer identifies you in any way.
- Billing history, on Stripe's side. If you ever had a paid subscription, Stripe (our payment processor) retains billing records as required for financial and legal recordkeeping. We don't control that retention period — see our Privacy Policy for more on how Stripe is used.
Neither of these retains your health-organization data (profiles, medications, appointments, documents, notes) in any form — that data is fully removed as described above.
Questions or need help?
Contact us any time through our Contact page, or see our full Privacy Policy for more detail on what we collect and how it's handled.
We only act on deletion requests we can verify come from the account owner, to protect against someone else deleting your account without your knowledge.