Privacy Policy
Effective date: 1 June 2026 · Last updated: 1 October 2026 · SNS Medical / LabLink
This Privacy Policy describes how SNS Medical ("we", "our", or "us") collects, uses, and protects information in connection with the LabLink mobile application ("the App") available on Android and iOS.
By using LabLink, you agree to the practices described in this policy. If you do not agree, please do not use the App.
1. Who we are
LabLink is operated by SNS Medical, a South African entity. You can contact us at admin@snsmedical.co.za or through the contact form at www.snsmedical.co.za/contact.
2. What LabLink does
LabLink is a productivity tool for authorised healthcare professionals. It provides a mobile interface to the National Health Laboratory Service (NHLS) TrakCare system, allowing professionals who already have NHLS access to retrieve lab results faster via barcode scanning or patient search. LabLink does not create new access to NHLS data — it only enables authorised users to access data they are already permitted to see.
3. Information we collect
3.1 Information you provide
- NHLS login credentials — your NHLS TrakCare username and password, stored encrypted on your device using AES-256 encryption (Android Keystore / iOS Secure Enclave). These are never transmitted to SNS Medical servers.
- In-app form submissions — if you contact us via the website contact form, we collect your name, email address, and message content.
3.2 Information generated automatically
- Search history — patient identifiers you have searched (stored locally on your device only, never uploaded).
- Cached PDFs — up to 10 recently viewed PDF reports stored locally on your device for offline access.
- Crash reports — if the App crashes, anonymised crash data (stack trace, device model, OS version, app version) is sent to Firebase Crashlytics. No patient data is included in crash reports.
- Usage analytics — anonymous usage events (e.g. feature used, screen viewed) sent to Firebase Analytics to help us understand which features are most useful. No patient data is included.
- Advertising identifier — if you consent (iOS) or by default (Android), Google AdMob may use your device's advertising identifier to serve relevant ads to free-tier users. Premium subscribers do not see ads.
3.3 Ward Boards data
If you use the Ward Boards feature, the following data is stored in Google Firestore (cloud):
- Board name, list names, and card titles/descriptions you create
- Your TrakCare display name (used as your identity within boards)
- Any patient hospital numbers you link to cards
- Lab result snapshots you choose to save to a card (episode date, test set names — no individual test values)
- Photos you upload to cards (stored in Firebase Storage)
- Comments and checklist items you add to cards
Ward data is only accessible to members of the board (users who have the invite code). Board membership is controlled by you.
4. How we use your information
- To connect to NHLS TrakCare and retrieve results on your behalf
- To provide the Ward Boards feature and sync data across your team
- To display relevant advertising to free-tier users
- To diagnose crashes and fix bugs (Crashlytics)
- To understand feature usage and improve the App (Firebase Analytics)
- To process and manage your subscription (RevenueCat)
- To respond to support enquiries
5. Third-party services
LabLink uses the following third-party services, each with their own privacy policies:
- Firebase (Google) — Crashlytics (crash reporting), Analytics (anonymous usage), Firestore (Ward Boards data), Firebase Storage (Ward photo attachments), Anonymous Authentication (Ward Boards identity). Firebase Privacy
- RevenueCat — subscription management and receipt validation for iOS and Android. RevenueCat Privacy
- Google AdMob — advertising displayed to free-tier users. Google Privacy Policy
- NHLS TrakCare — the NHLS system to which the App connects using your credentials. All data retrieved from NHLS is governed by NHLS's own data governance policies.
6. Patient data
LabLink is a viewing tool. Lab result data retrieved from NHLS is displayed on your device and is not uploaded to SNS Medical servers. The exception is lab result snapshots in Ward Boards, which are stored in Firestore as described above. You are responsible for ensuring that your use of LabLink — including any sharing of results — complies with your institution's policies and applicable law, including POPIA (Protection of Personal Information Act).
7. Data security
- NHLS credentials are encrypted with AES-256 and stored in Android Keystore or iOS Secure Enclave. They are never transmitted to our servers.
- All network communication uses HTTPS/TLS.
- Ward Boards data in Firestore is protected by Firebase security rules requiring authenticated access.
- The App automatically locks after 5 minutes of inactivity.
8. Data retention
- On-device data (search history, cached PDFs) — stored until you clear the app cache or uninstall the App. Maximum 10 cached PDFs (LRU eviction).
- Ward Boards data — retained in Firestore until you delete the board or leave as the last member (which deletes all board data).
- Crash and analytics data — retained by Firebase for up to 90 days per their standard policy.
- Subscription data — retained by RevenueCat as required to manage your subscription and resolve disputes.
9. Your rights (POPIA)
Under the Protection of Personal Information Act (POPIA), you have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to the processing of your personal information
To exercise these rights, contact us at admin@snsmedical.co.za. We will respond within 30 days.
10. Children
LabLink is intended for use by authorised healthcare professionals only. It is not directed at children under 18. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify users via the App. Continued use of the App after any changes constitutes your acceptance of the updated policy.
12. Contact
If you have any questions about this Privacy Policy or our data practices, please contact us: