Privacy Policy
This policy explains what TRMR does with information. The short version is unusual enough to state up front.
The health information you enter into this app stays on your iPhone. Your questionnaire answers and the visit summary built from them are stored on your device and are never sent to us or to anyone else. We do not receive them, we cannot read them, and we could not produce them if we were asked to. If you want a clinician to have your summary, you share it yourself.
The one exception is optional: if you agree to take part in a research study and answer its surveys in the app’s password-protected research area, those survey answers are encrypted on your iPhone and sent to the study team (section 4).
1. Who we are
Who’s In Labs, LLC publishes TRMR: A Tremor Guide, also published and referred to as The TRMR App (either name, the “App”). Contact us at [email protected].
2. What stays on your device, and never leaves
All of the following is created and kept on your iPhone only:
- Your visit-prep questionnaire answers — when your tremor started, what makes it better or worse, family history, medications, and anything else you type.
- The visit summary the app generates from those answers, including any document you produce from it.
- Anything else you save in the app, such as notes or saved articles.
This information is written to your device’s storage using iOS Data Protection, which keeps it encrypted at rest. It is not backed up to any server of ours. It may be included in your own iCloud or computer backups, which are governed by Apple’s terms and your own settings, not ours.
Deleting the app, or using More → Delete all my data, erases this information from your device. Because we never had a copy, there is nothing on our side to delete.
3. Sharing is something you do, not something we do
The app has no button that sends your health information to us or to a care team. If you want a clinician to have your summary, you export it yourself through your device’s standard sharing features — printing it, or sending it to a recipient you pick.
Once you send it, it is out of our hands and out of this policy. What happens to it is governed by whatever service, carrier, or recipient you chose. Ordinary email is generally not secure or confidential. Think about what you are sending and to whom, and prefer handing a printed copy to your clinician in person when you can.
4. What we do receive
Three narrow things. Only the third involves health information, and only for people who choose to take part in a research study.
Hospital staff accounts (the partner portal)
The partner portal is a business feature for employees of medical centers that have an agreement with us. If you are such an employee and sign in, we receive and store your work email address, your name, your job title, and a contact phone number, so we can verify you, sign you in, and know who maintains a listing. We use this only to operate the portal. We do not sell it, and we do not use it for advertising.
You can delete your partner account in the app at More → For hospitals → Delete my partner account.
Location, if you allow it
If you grant location access, the app uses your coordinates to sort the centers directory by distance. This happens on your device, in the moment. Your location is not stored and not transmitted. Denying location leaves the directory fully usable, sorted alphabetically instead.
Research study participants (optional)
The app has a research area, locked with a password the study team gives to participants, used for the TRMR-PREP study of pre-visit education before deep brain stimulation and focused ultrasound consultations. If you take part, the app sends: your answers to the study surveys; the initials and date of birth you type to open them; a record that you agreed to the study’s information sheet and to the app’s Terms of Use and this policy (when, and which versions); and, if you stop a survey early, which question you stopped on.
Your survey answers and your initials and date of birth are encrypted on your iPhone before they are sent, with a key held only by the study’s investigators. Our servers (hosted by Cloudflare) store them in that encrypted form; as the app’s publisher we cannot read them. The servers also keep coded study records — a study number, study group, dates, answers to the eligibility questions, and consent records — without your name.
This information is used only for the study, as its information sheet describes. It is never sold or used for advertising. Initials and dates of birth are deleted when the study ends. To withdraw, or to ask for your answers to be deleted, contact the study team listed on the information sheet. Taking part is voluntary and does not affect your care, and nothing else in the app changes whether or not you do.
The research area is part of the app. This policy and the app’s Terms of Use cover it just as they cover the rest of the app, and every participant confirms they agree to both — on whatever device they use — before their first survey. They take away none of your rights as a research participant; where they differ from a study’s information sheet about that study, the information sheet comes first.
5. When we would disclose the little we hold
The promise in section 2 is about your health information, which we never receive outside the research area — and research answers reach us only in encrypted form that we cannot read; they are disclosed only as the study’s information sheet describes. For the partner-staff information described in section 4, we may disclose it in these limited circumstances:
- Service providers who host or operate our systems on our behalf, bound to use it only for that purpose.
- Legal compulsion — a valid subpoena, court order, or other legal process we are required to obey.
- Imminent harm — where disclosure is necessary to prevent serious harm to a person.
- A business transfer — if the company or its assets are acquired, information may transfer as part of that transaction, subject to this policy.
These are the honest limits of any privacy promise. We list them rather than implying they do not exist.
6. What we do not do
- We do not sell or rent personal information.
- We do not show advertising and do not share information with advertisers.
- We do not use third-party analytics or tracking software.
- We do not access the advertising identifier (IDFA), and the app never asks to track you.
- We do not use Apple HealthKit and do not read data from other health apps.
- We do not use your information to train machine learning models.
7. Children
The app is intended for adults and is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
8. Your choices and rights
Outside the research area your health information never leaves your device, so the most direct control is in your hands: delete it in the app at any time. Research participants can withdraw or ask for deletion through the study team. For information we do hold, you may ask us to access, correct, or delete it by writing to [email protected]. Depending on where you live, you may have additional rights under state privacy law, including the right to know what we hold and the right to be free from discrimination for exercising your rights. We will honor those rights as applicable.
9. Security, stated honestly
We use iOS Data Protection for on-device storage, encrypted connections for the partner portal and the research area, end-to-end encryption of research survey answers, and access controls on our systems. Keeping your health information off our servers entirely is the strongest protection we offer, because information we never hold cannot be breached from our side. That said, no method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. Protecting the device itself — a passcode, Face ID, and current software — matters, and that part is yours.
10. This is not medical advice
The app is an educational resource. It does not provide medical advice, diagnosis, or treatment, and nothing in it replaces evaluation by a licensed clinician. See the Terms of Use for the full statement.
11. Changes to this policy
If we change this policy we will update the effective date above and, for material changes, give notice in the app. If we ever change what the app does with your health information, we will say so plainly before the change takes effect — not quietly in a revision.
12. Contact
Who’s In Labs, LLC — [email protected]