# My Doctor Friend: CAIHL reassessment

September 8, 2026. Published AI-assisted draft.

My Doctor Friend combines patient questions, records, and visit support. The current privacy notice distinguishes consumer and provider use, names Google processing, and describes derivative-data permissions and layered retention. The earlier unread-policy caveat is replaced by these conditions.

## Scope and agency posture

Patient and caregiver companion, with provider-mediated use and community sharing as distinct contexts. Preserve the August 9 baseline 82. This pass resolves the prior unread-privacy-notice gap.

Posture: **Potentially agency-expanding**.

Axis: 82/100, retained provisionally. No numerical recalibration was performed.

## Sources and documented findings

- Public web retrieval returned empty bodies. One targeted browser rendering successfully read the [June 20 privacy notice](https://about.mydoctorfriend.ai/privacy), without login or interaction with the product.

- The notice distinguishes direct consumer use from provider business-associate processing. It names OpenAI, Anthropic and Google, with stated BAA arrangements, and permits non-personal derivatives for analytics, development or research. It documents account deletion, a correction/portability contact and analytics opt-out.

- Account/health-record retention includes up to seven years in active storage and six-year encrypted backup language. Deletion promises distinguish primary data, AI logs and backup rotation. Community contributions are visible to members under pseudonyms. Its Apple Health noncollection statement is explicitly a launch-era statement, leaving the current integration unresolved.

## Patient authority

Inference from the documented workflow: Patient-selected conversation and preparation remain the main agency basis. Consolidation alone does not prove patient custody independent of the vendor. Caregiver control also needs to be distinguished from the authority of the person whose information is held.

## Critical capacity

Editorial assessment: The baseline's preparation and thought-partner rationale is plausible. Data correction rights now have a current source, but a right to request correction is not proof of editable generated summaries or reliable error resolution.

## Informed control

Editorial assessment: The privacy gap is now narrowed substantially. Direct-use safeguards should not be described as universal HIPAA coverage, and no-sale language should not imply no derivative research use. Retention and community visibility deserve plain-language prominence.

## Assessment and limits

Change the stale unread-notice finding into a substantive description of the published conditions. Keep the qualified patient-directed posture, without treating founder identity or record consolidation as proof of independent control.

Confidence: Medium for rendered policy, limited for product behavior.

Remaining uncertainty: Current audio and Apple Health processing, backup rotation duration, training restrictions and summary correction remain unresolved. Pricing and App Store counts remain August evidence.

Published documentation is evidence of stated conditions, not proof of actual implementation. Unknowns did not receive automatic negative points. Funding, sponsorship, and public code do not determine agency by themselves.

## Review provenance

- Reviewer/model: OpenAI Codex / GPT-6.
- Method: Focused public-source reassessment using CAIHL: patient authority, critical capacity, and informed control. Existing evidence plus one focused primary-source pass and at most one targeted follow-up. No live product testing. Numerical scores remain provisional editorial placements, not a new calculation.
- Human review: Hugo Campos authorized publication of these AI-assisted draft reassessments on September 8, 2026. This does not claim comprehensive human verification of every finding.
- Earlier review: 2026-08-09. [Historical assessment](https://github.com/hugooc/HugoScore/blob/7e0ba68fae543832fe5f19009448e473983f48a9/site/reports/my-doctor-friend-caihl-report.md). Earlier claims are not automatically reverified by this publication.