Privacy

Your answers stay on your device

The patient app has no account, no sign-in, and no tracking. Your answers are saved only in this browser on this device, and you can delete them at any time with Delete my answers. Nothing leaves the device unless you download, print, or share it yourself.

In the demonstration, Send to my clinician (demo) keeps a copy in the same browser for the clinician demonstration page to read. It is not sent over the internet.

The demonstration people are made up. Loading one does not send information about you.

Anyone using this browser on this device can see answers saved here. On a shared device, use Delete my answers when you are done.

The study search sends only the condition and the place you type to ClinicalTrials.gov, which answers with matching studies.

The clinician view

When a health record system launches the clinician view, the chart is read and scored in the clinician's browser. The access token the record system grants is kept in that browser session only. The demonstration page reads synthetic records shipped with the site.

The CDS Hooks service

When a health record system calls the CDS Hooks service, the service scores the chart data in the request and returns cards. Request bodies are not logged or stored.

What this site stores in your browser

• Your appearance and text-size choices (unom.theme, unom.text).
• Whether you have seen the homepage tour (unom.tour).
• In the patient app, your personal answers, synthetic demo state, saved studies, and the demonstration hand-off (unm-patient-personal-v1, unm-patient-v1, unm-patient-trials-v1, unm-demo-handoff-v1).

The site's code sets no cookies and includes no analytics or advertising.

Hosting

The site is served by Cloudflare Pages, which handles standard request data such as IP addresses to deliver the pages. The clinician launch pages load the open-source SMART on FHIR client library from the jsDelivr content network.