Your data
Privacy Policy
Your card details go straight to Stripe and never touch MedCurb's servers. We use your information only to arrange and complete your rides, and we never sell it.
01Who we are
MedCurb is a marketplace that connects patients and facilities with licensed non-emergency medical transportation (NEMT) companies in Washington State. This policy explains what information we collect through the MedCurb website and mobile app, how we use it, who we share it with, and the choices you have.
02Information you give us
Account details: your name, email address, phone number, password (stored only in encrypted, hashed form), and whether you are a patient, facility, or transportation company. Trip details: pickup and destination addresses, pickup time, trip type, mobility needs (ambulatory, wheelchair, or stretcher), attendants, oxygen or wheelchair requests, stairs and weight information, photos you choose to upload, notes for the driver, and the contact details of the person riding. Transportation companies also provide business details, licenses, insurance documents, vehicles, and driver names.
03Payment information
Card payments are processed by Stripe. Your full card number and security code are entered directly into Stripe's secure form and are never sent to or stored on MedCurb's servers. We keep only what Stripe gives back to identify the payment, such as the card brand, the last four digits, and payment status. Transportation companies' bank or debit card payout details are collected and held by Stripe Connect, not by MedCurb.
04Information collected automatically
While a driver is on an active trip, the MedCurb app shares the driver's location so the patient and MedCurb can see the vehicle approaching; location is only collected with the driver's permission and while the trip screen is in use. We also store device notification tokens to send trip alerts, and basic technical logs (such as IP address and browser type) used for security and to prevent abuse.
05Health-related information
Trip details can reveal that a person is traveling to a medical appointment, along with mobility and other care needs. We treat this as sensitive consumer health data. We collect it only to arrange, price, and complete your ride, share it only as described below, and never sell it or use it for advertising. You can withdraw consent and ask us to delete it at any time by contacting us.
06How we use information
To create and secure your account; to quote, book, and charge for rides; to match trips with an approved transportation company and help the driver reach you; to send booking, arrival, and payment notifications; to handle cancellations, refunds, reviews, and customer service; to pay transportation companies; and to detect fraud, enforce our terms, and meet legal obligations.
07Who we share it with
The transportation company that accepts your trip, and its assigned driver, see the rider's name, phone number, addresses, pickup time, and care needs needed to complete the ride. Service providers that run MedCurb on our behalf process data under contract: Stripe (payments), Supabase (secure database and sign-in), Vercel (website hosting), Google Maps and OpenStreetMap services (address lookup and routes), Resend (email), and Expo (app notifications). We may disclose information if required by law or to protect someone's safety. We do not sell personal information.
08How we protect it
All data is encrypted in transit (HTTPS) and stored with an encrypted cloud database. Access is restricted so each patient sees only their own rides and companies see only trips they are allowed to handle. Administrator accounts require two-step verification, sign-in attempts are rate-limited, and secret keys are kept only on our servers. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you as required by law.
09How long we keep it
We keep account and trip records while your account is open and for as long as needed for payments, tax, insurance, and legal requirements. Driver location updates are kept only as long as needed for the trip and its records. When you delete your account, we delete or de-identify your information unless we must keep it by law.
10Your choices and rights
You can view and update your account details in the app. You can ask us for a copy of your information, to correct it, or to delete your account and data. Washington residents have additional rights over consumer health data under the My Health My Data Act, including the right to know what we collect and share and to have it deleted. We will not discriminate against you for using these rights.
11Children
MedCurb accounts are for adults and organizations. Rides for minors must be booked by a parent, guardian, or facility, who is responsible for the information they provide.
12Changes and contact
We may update this policy and will post the new version here with a new date. For privacy questions or requests, call or text MedCurb customer service at (501) 295-7924.
Last updated November 5, 2026.