1. Privacy
Your case is private by default.
2. Respect
Your health story is treated as lived experience, not a dataset.
3. Transparency
You can see who has access and why.
4. Control
You decide who may participate and what they may see.
5. Informed consent
Important authorizations generate readable receipts.
6. Access visibility
Access history is presented in understandable language.
7. Revocation
You can revoke access where operationally possible.
8. Correction
You can review, confirm, correct or dispute extracted information where supported.
9. Portability
You should be able to retrieve your information where supported.
10. Human review
Medical action remains under qualified clinical authority.
11. AI transparency
Material AI outputs show provenance and are not presented as physician-authored.
12. Source transparency
Research claims should connect to evidence and original sources.
13. Security
Security claims describe actual controls—not slogans.
14. Non-discrimination
Access and participation must not be designed to discriminate.
15. Accessibility
Core flows target WCAG 2.2 AA usability.
16. Complaint mechanisms
You can raise privacy, access, AI and safety concerns.
17. Commercial transparency
Funding and commercial relationships will be disclosed as they exist—never invented.
18. Clear deletion practices
Deletion controls must explain what is removed and what may be retained.
19. Accurate representation of expertise
Credentials and roles must not be exaggerated.
20. No fabricated outcomes
We do not invent patient stories, cure claims or unverifiable results.