Meridian Privacy Policy

What stays on your iPhone

Everything you put into Meridian stays on your iPhone: the reports you add (photos and PDFs), the results read from them, results you type in, notes, your profile, family members’ names and dates of birth, medications, conditions, allergies and your emergency card. We cannot see, open, sell or share any of it, because it is never sent to us.

Report files are encrypted by Meridian with AES-256-GCM, with the key kept in your iPhone’s Keychain. Everything else is encrypted by iOS with your passcode (Data Protection). The security page explains the details.

Meridian also keeps a small counter in your iPhone’s Keychain of how many free reports you have used, so the free allowance can’t be reset by reinstalling. It contains no health information, is not synced, and never leaves your iPhone except inside your own iPhone backup.

How reports are read

Meridian reads your reports on your iPhone with Apple’s on-device text recognition and, on iPhones that support it, Apple’s on-device Foundation Model. Nothing is sent to a server to do this, and no outside AI service is used.

Your iPhone backups

From Meridian 1.7, Meridian’s data is part of your iPhone’s iCloud or computer backup, so a restored or new iPhone has your records. You can switch this off at any time in Meridian under Settings › Your Data › Include in iPhone Backup.

• That backup belongs to you, in your own iCloud account or on your own computer. It is never sent to us. iCloud backups are handled by Apple under Apple’s privacy policy.
• iCloud backups are end-to-end encrypted only if you turn on Advanced Data Protection. Without it, Apple keeps the keys to your iCloud backup.
• If you restore a computer backup to a different iPhone, your report files open only if that backup was encrypted.

Versions of Meridian before 1.7 kept their data out of iPhone backups.

Files you export

• Backup file. You can export a password-protected backup file of your records and scans. It is encrypted with the password you choose, which we never see and cannot recover.
• Spreadsheet export. You can export every result, report and family detail as spreadsheet (CSV) files, with your original scans. These files are not encrypted once you share them.
• PDF summary. Premium subscribers can create a PDF summary to share, for example with a doctor.

You decide where exported files go. Once shared, they are handled by the app, service or person you send them to, not by Meridian.

What we collect: purchase history only

To unlock Premium and restore your purchases, Meridian uses RevenueCat (RevenueCat, Inc., United States) to check your App Store purchases. RevenueCat receives your purchase history (which subscription, when it started and renews, and its status) together with an anonymous ID that Meridian creates. It does not receive your name, email address or any health information.

Payments are handled by Apple. We never see your payment details, your name or your Apple Account. Like any internet service, Apple and RevenueCat can see your device’s IP address when Meridian connects to them.

This is why Meridian’s App Store privacy label lists “Purchase History” as the only data collected. We use it only to provide your subscription.

No analytics, ads or tracking

Meridian contains no analytics, advertising or tracking code. We don’t sell data, and we don’t track you across apps or websites.

Separately, if you have turned on Share With App Developers in your iPhone’s Settings › Privacy & Security › Analytics & Improvements, Apple may share crash reports and usage statistics about Meridian with us. Apple collects these, not Meridian, and they do not contain your records. You can turn this off at any time in the same place.

Apple Health

The current version of Meridian does not read from or write to Apple Health.

Children

Meridian is rated 13+ on the App Store. Parents can keep records for their children in family profiles; like everything else, those stay on the parent’s iPhone. We do not collect personal information from children.

Deleting your data

• On your iPhone: delete any report or family member in Meridian, or everything at once with Settings › Delete All Data & Reset. Deleting the app also removes its data from your iPhone.
• In backups: copies in your iCloud or computer backups stay until those backups are replaced or deleted. Exported files stay wherever you saved them.
• Purchase history: RevenueCat keeps it while it is needed for your subscription and as the law requires. To ask for it to be deleted, email us; we may ask for your App Store order ID so we can find the anonymous record.

We can’t access, recover or delete your records for you, because we never have them.

Your rights

Depending on where you live (for example under the GDPR in the EU, the UK GDPR, or California law), you may have the right to access, correct, delete or object to the use of your personal data, and to complain to your data protection authority. The only personal data we can reach is the purchase history held by RevenueCat. Email us and we will answer within 30 days.

For people in the EU and UK: we use purchase history to provide the subscription you bought (performance of a contract). RevenueCat processes it in the United States.

This website

This policy covers the Meridian app. Our website works differently and uses optional analytics; see the PurpleDaisy privacy policy.

Changes

If Meridian changes what it does with data, we will update this page and its date before the new version reaches the App Store, and mention important changes in the app’s release notes.

Contact

Manish Kumar (PurpleDaisy)
Email: bypurpledaisy@gmail.com
Help: Support page