Consumer Health Data Privacy Policy
How Hilltop handles health information people choose to share, under Washington's My Health My Data Act and similar state laws.
Effective October 26, 2026
1. What this covers
Hilltop isn't a health app and never asks for health information. But people sometimes choose to write about physical or mental health, their own or someone else's, in prayer requests, messages, posts, RSVP notes or emails to us. Under Washington's My Health My Data Act and similar laws (such as Nevada's), that's "consumer health data". This policy explains how we handle it. It adds to the Privacy Policy.
Hilltop is run by Edward Samolov, an individual in Washington State, USA ("Hilltop", "we" and "us").
2. Health data we collect, and why
- What: anything about someone's physical or mental health written into what's shared on Hilltop, such as an illness, injury, surgery, treatment, medication, pregnancy, mental health or recovery.
- Why, and how it's used: to store it and show it to the people you chose; to send the notifications you've turned on, which can show the first words of a message; to review reports and keep Hilltop safe; to answer you when you write to us; and to follow the law.
- Never: sold, used for ads or profiles, used for research or to train AI models, or used for anything else without asking you first.
- Consent: we collect and share it only as needed to do what you ask when you share it, which is delivering it to the people you chose. We'll ask for your consent before collecting or sharing it for any other reason.
3. Where it comes from
- You, when you share something on Hilltop or email us.
- Other people in your groups and chats who write about you, for example in a prayer request.
5. Your rights
- Know and see: ask whether we have your health data, get a copy, and get a list of everyone we've shared it with, with how to contact them.
- Delete: ask us to delete it. We delete it from our records and backups and tell the companies above to delete it too.
- Withdraw consent: delete what you shared, delete your account, or ask us.
- Fair treatment: we'll never treat you differently for using these rights.
How: email [email protected] from your account's email address with "Health data request" in the subject, so we can confirm it's you. We answer within 45 days. If we need more time, we'll tell you why, and take at most 45 more days.
Appeal: if we turn your request down, reply to our answer to appeal. We'll respond within 45 days. If you're not satisfied, you can file a complaint with the Washington State Attorney General.
6. How we protect it
Only the Hilltop team can reach stored information, and only to run Hilltop, look into a report, or when the law requires it. The Privacy Policy's security section explains how it's protected.