Privacy in this preview.
Please use fictional details while Howard is being tested. This preview is not a clinical service or a place to send medical records.
Your conversation
The hosted Howard prototype runs on Google Cloud in the United States. It stores conversation and cadence preferences in an encrypted database on a persistent server disk. The encryption key is held on that server, so this is not end-to-end encryption. The current AI service is Google Vertex AI; messages sent for AI replies are processed by that service. Messages sent through the current Inkbox connection also pass through Inkbox and the applicable messaging networks. These services have their own data handling and retention.
The waitlist
If you join the waitlist, Howard saves your phone number, joining date and permission to contact you about access in its encrypted database. The shared phone form verifies your number with a code before adding a new request. Howard also stores the verified authentication identity to protect access. Your request stays pending until the operator clears access. Pending requests do not create a Howard health profile or enroll you in check-ins, and this preview does not automatically send access invitations. Google retains a phone authentication identity for verification; that identity alone does not grant Howard access.
Your phone number
Phone sign-in uses Firebase Authentication. Google sends a verification text and processes the phone number for authentication and abuse prevention. Howard verifies the resulting identity before opening your workspace. A sign-in code is not medical consent or permission for recurring check-ins.
Adult signup
After access has been cleared and your phone verified, signup checks a date of birth to confirm self-reported adult eligibility. The signup form’s birth date is not retained or sent to the AI; Howard saves only the adult confirmation and the date it was checked. This is not identity verification.
Clinical care
Medical intake, appointments, payments and clinical records stay in HealthMCP’s existing secure care flow. This Howard preview does not copy those records, submit consultations or send unreviewed clinical advice.
Your choices
You can pause check-ins in ordinary language and use the messaging provider’s opt-out keywords. You can log out of the workspace. “Start a fresh conversation” resets the current Howard conversation and cadence while retaining signup and opt-out settings; it does not delete HealthMCP clinical records or carrier records.
No advertising pixels or session replay are included in this preview. Before any public patient release, the operator will publish the applicable service terms, privacy notice, contact information and retention policy for the enabled workflows.
