Privacy Policy

Last updated: 7 November 2026

This privacy policy applies to the Health Switch RSA app (the "App") for iPhone, published on the App Store as com.brynne98.health-switch-rsa, and for Android, published on Google Play as com.brynne98.healthswitchrsa.

The App is a directory of South African hospital telephone numbers and speed dials for clinicians. It has no sign-up and no sign-in. We collect the minimum needed for the App to work, and this page says plainly what the third-party services we use collect on our behalf.

Who is responsible

The App is published by Theron and Prince Solutions (Pty) Ltd, a private company in South Africa (registration number 2026/182827/07), which is the responsible party for this information under the Protection of Personal Information Act (POPIA). The App is offered in South Africa only. The company's director is the Information Officer: send any privacy request or complaint to [email protected]. Our PAIA Manual lists the records we hold and how to ask for them.

No patient information

The App never asks for patient information and must not hold any. Do not type patient names, folder numbers, diagnoses or other health information into a number, a report, an idea or the Send private feedback screen. We delete any we find.

Why we use your information

POPIA lets us process personal information only for a lawful reason. Ours are:

• To run the App and the shared directory (contributions, reports, feedback, purchases): needed to provide the service you asked for.
• To fix crashes, keep the App fast and see which parts are used (Sentry, EAS Observe, EAS Insights, PostHog): our legitimate interest in keeping a medical directory reliable.
• To show ads to phones without Pro (AdMob): our legitimate interest in keeping the directory free. See Google AdMob below for how ads use your data and how to limit it.

Giving us information is voluntary. You can read the whole directory without contributing, sending feedback or buying anything.

The directory itself

The directory ships inside the App and is read on your phone. Looking up a hospital or a number sends nothing anywhere. The App checks for newer directory entries when it has a connection, which sends a timestamp and nothing about you. It also checks for updates to the App itself; see EAS Update below.

The numbers come from hospital directories that clinicians built on Accurx Switch, carried over with Accurx's permission before that service closed to South Africa. They are hospital extensions and ward numbers, not personal numbers. If you find a personal number in the directory, report it in the App or email us and we will remove it.

If your name or number is in the directory

You do not need to use the App for this section to apply to you. Some entries carry the name or role of the person who answers a hospital line, because the hospitals' own directories listed them that way. We hold these work contact details for one purpose: so that healthcare workers can reach the right service quickly. We do not use them for anything else, sell them, or send them to advertisers or to the analytics services below.

If an entry names you, or lists a number you do not want listed, email us at the address at the end of this page, or report the number in the App. We will remove it from the App or correct it, and you do not have to give a reason. Earlier versions of the entry stay in our records, so a bad edit can be undone. Ask, and we will delete those too.

Data stored on your device

Your favourites, your recent hospitals, your appearance choice and which numbers you have reported are stored on your phone using the operating system's standard storage. They never leave it. (Reports themselves go to our server; see below.)

Contributions you make

Anyone can add, correct or report a number. When you do, the App quietly creates an anonymous identity for your installation so that your changes can be attributed to one another and, if needed, undone together. This identity is a random token. It is not your name, email address, phone number or professional registration, none of which the App ever asks for.

What is stored on our server when you contribute:

• The number or hospital you added or changed, and the previous value.
• The anonymous identity of the installation that made the change.
• The time of the change.
• Reports that a number does not work, or that a hospital should not be listed, counted per installation.
• Feature ideas you send. Everyone can see them. Your votes on ideas, and reports of ideas, are counted per installation.
• Feedback you type on the Send private feedback screen. Only we see it. Please do not put personal details in it.

Contributions are shared with every other user of the App, because that is the point of a shared directory. Previous values are kept so a bad edit can be reverted. Nothing you contribute can be traced to you unless you put identifying details into the text yourself.

Our server is hosted by Convex (convex.dev) in the United States. Convex's privacy policy: https://www.convex.dev/legal/privacy

Data collected by third-party services

PostHog (product analytics)

The App sends a small set of events to PostHog's EU-hosted service so we can see which parts of the App are used and where the directory has gaps. These events include:

• App opens, App version and device model.
• That a hospital was opened, a number was dialled, copied or shared, an edit or report was made, or the paywall was shown.
• That a search found nothing, and how many characters were typed.
• How far a list was scrolled.
• That a purchase was started, made, cancelled, failed or restored, and which plan.

We never send the words you searched for, because staff names are in this data. We never send your name, email address or advertising identifier. PostHog assigns a random identifier to an installation so we can measure return usage. Session replay and automatic touch or text capture are disabled. PostHog receives your IP address with each event, but looking up a location from it is disabled.

PostHog's privacy policy: https://posthog.com/privacy

Sentry (crash reports)

If the App crashes or hits an error, it sends a report to Sentry's EU-hosted service in Germany so we can fix it. A report includes:

• The error and where in the App's code it happened.
• The App version and update, device model and operating system version.
• A random identifier for the installation, so we can tell how many phones a crash affects.

Crash reports never include your name, email address, the words you searched for, or anything shown on screen. Screen recording and performance tracing are switched off.

Sentry's privacy policy: https://sentry.io/privacy/

EAS Observe (launch speed)

The App measures how long it takes to open and sends those timings to Expo's EAS Observe service, so we notice if an update makes it slower. It sends:

• Launch timings and how smoothly the first screens drew.
• Device model, operating system version, language setting, and the App version and update.
• The server name of the slowest network request during launch.
• Errors that happened while the App was open.
• A random identifier for the installation and for each session.

Nothing from the directory, your searches or your contributions is sent.

EAS Update and EAS Insights (app updates)

The App can receive small updates without a new store download. When it opens, it asks Expo's servers whether an update is ready, sending the App version, the update it is running and a random identifier for the installation. It also sends one launch event to EAS Insights with the same random identifier, the App version and the operating system version, so we can count how many phones run each version.

Expo is based in the United States. Expo's privacy policy: https://expo.dev/privacy

Google AdMob (advertising)

Phones without Pro see one small sponsored bar, served by Google AdMob. The first time the bar is about to appear, the App may ask:

• Where the law requires it (the EU, the UK and some US states), Google's consent form asks whether your data may be used for personalised advertising. You can change that answer later under Ad choices in the App's Settings.
• On iPhone, Apple's tracking prompt asks whether the App may use your device's advertising identifier (IDFA). You can change that answer later in iOS Settings → Privacy & Security → Tracking.
• On Android, the App may read your device's advertising ID. You can reset it or delete it in Android Settings → Privacy → Ads (on some phones, Settings → Google → Ads).

If you say yes, AdMob may collect your advertising identifier and usage data (which screens you opened, ad interactions) to pick and measure ads. In South Africa Google shows no consent form, so on Android ads may be personalised unless you delete or reset the advertising ID as above. If you say no on iPhone, AdMob does not get your advertising identifier, but it may still use other signals to pick ads. Whatever you answer, AdMob also sees your IP address, which gives an approximate location (about city level), to serve ads and stop fraud. Nothing in the App changes either way. Buying Pro removes the bar and stops all of this.

Google's privacy policy: https://policies.google.com/privacy How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites

RevenueCat (in-app purchase processing)

Each time the App opens, it asks RevenueCat whether this phone has Pro. RevenueCat also handles buying Pro and Restore purchases: it checks the purchase with Apple or Google and remembers it across reinstalls. RevenueCat may collect:

• An anonymous user identifier generated automatically on first launch.
• Purchase history for the App: which product, when, and the price.
• Device platform and OS version.

RevenueCat does not receive your name, email address or anything you typed into the App.

RevenueCat's privacy policy: https://www.revenuecat.com/privacy

Apple and Google Play billing

On iPhone, Apple processes the payment through your Apple Account; on Android, Google Play processes it through your Google account. We never see your payment details. Their privacy policies apply to that flow: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy

Who we share it with

Only the services named above, and only for the purposes given for each. We do not sell personal information. Each service processes data for us under its own terms and data protection agreement. Contributions are shown to every user of the App, as described above.

Sending information outside South Africa

Our server (Convex) and Expo's services are in the United States. PostHog and Sentry use EU servers. Google, Apple and RevenueCat may process data in the United States and other countries. POPIA section 72 allows this because each service is bound by its terms and data protection agreement to protect the data to a standard similar to POPIA.

Keeping it safe

All data between the App and these services travels encrypted (HTTPS). The anonymous identity used for contributions is kept in your phone's secure storage. Only the publisher has admin access to the server and the services' dashboards. If a breach affects your information, we will tell the Information Regulator and, where we can reach you, you.

How long we keep things

• Directory entries and their history: for as long as the directory exists, so a bad edit can be put back. Nothing on our server is deleted automatically. An entry is taken out of the App sooner when it is reported as personal or the person it names asks, and its earlier versions are deleted when that person asks.
• Feedback you send: kept until we remove it, and deleted when you ask.
• Usage analytics (PostHog): one year.
• Crash reports (Sentry): up to 90 days.
• Launch-speed reports (EAS Observe): about 90 days.
• App-version counts (EAS Insights): for Expo's own retention period.
• Purchase records: held by RevenueCat, Apple and Google for as long as the subscription and the law require.

We keep no copies of what those services hold.

Children

The App is made for clinicians and is not directed at children. POPIA treats anyone under 18 as a child. Someone under 18 may use the App only with a parent's or guardian's consent (see the Terms of Use), and the App then collects the same anonymous data as for anyone else. A parent or guardian may email us to have it deleted.

Your rights

Under the Protection of Personal Information Act (POPIA) you may ask what we hold about you, ask for it to be corrected or deleted, and object to its processing. Because we cannot tell which phone is yours, deleting the App is the only way to stop analytics and crash reports from it. Because nothing we hold is linked to your name or email address, we may not be able to find a particular installation from your contact details alone. If you tell us the approximate time and content of a contribution, we can find and remove it.

To delete your data, email [email protected]. Tell us roughly when you sent feedback or made a change, and what it was. We will delete that feedback, and any entry or change you ask us to remove. Numbers that other clinicians rely on may stay in the shared directory unless they are personal or you ask us to remove a specific one. You do not need an account, and we never ask for proof of who you are beyond what is needed to find the data. We reply within 30 days.

You can opt out of personalised advertising at any time through Apple's tracking setting, Android's ads settings or, where it is shown, the App's Ad choices row, stop advertising entirely by buying Pro, and delete everything on your phone by deleting the App.

Changes to this policy

We may update this policy as the App changes or as the law requires. The date at the top always shows the latest version. Material changes will be announced in the App's release notes.

Contact

Questions about this policy or about your data:

Email: [email protected]

If you believe we are not complying with this policy, please email us first. You also have the right to complain to the Information Regulator of South Africa at any time:

• Email: [email protected] (enquiries: [email protected])
• Phone: 010 023 5200
• Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
• Website: https://inforegulator.org.za