Security
Private by design.
Further Health keeps your health data on your own devices, encrypted. Here is what that means in practice, and what leaves your device when you ask it to.
On your devices
- An encrypted vault on your devices
- Your health record is stored on your own devices, encrypted column by column with AES-256-GCM. The key comes from your passphrase through Argon2id, with a key-encrypting key and data-encrypting keys kept separate.
- Your DNA file stays on your device
- The raw genetic file you import is read and stored only on the device you imported it on. It is never uploaded, never synced, and never included in a cloud backup.
- Sync and backup are encrypted first
- When your data syncs between your devices or is backed up, it is encrypted on the device before it leaves. The keys stay on your devices, so our servers can't read it.
When data leaves a device
- Premium AI sees a pseudonymized copy
- Only when you use a Premium feature, a pseudonymized subset of your data is sent to our AI provider to answer you. Direct identifiers such as your name, date of birth, and contact details are removed first.
- A deterministic privacy filter
- Everything bound for the AI provider passes a rule-based privacy filter and an additional safety check, which strip direct identifiers before anything leaves.
- Encrypted in transit
- Network calls use TLS 1.2 or higher.
- No training, no selling, no ads
- We don't use your data to train AI models, we don't sell it, and we don't run advertising or analytics cookies on this site.
The company
- A signed, notarized Mac app
- The Mac app is signed with our Apple Developer ID, notarized by Apple, and kept current with automatic updates.
- Our sub-processors
- The companies that host and run parts of the service are listed, with what each one handles, in section 7 of our Privacy Policy.
- HIPAA status
- Further Health is a consumer wellness product. We are not a HIPAA covered entity or business associate. Your data is protected by our Privacy Policy and by consumer-health privacy laws instead.
- Report a vulnerability
- If you find a security issue, email privacy@further.health. We will respond promptly.