LLabInboxBack to portal

Privacy, in plain language

Your result belongs to you.

LabInbox is built to deliver diagnostic-result PDFs from a diagnostic center to the mobile number the patient gave that center. We do not use health information for advertising.

Who is responsible

The diagnostic center that ordered or produced your result decides why the result is processed and how long it must be kept. LabInbox handles the delivery service under that center's written instructions. The final legal roles and contact details must be stated in your center's notice and agreement.

What we handle

  • Your Philippine mobile number, stored in protected form and used to match and verify you.
  • The original PDF supplied by the diagnostic center and a safety-rendered preview.
  • Basic delivery details such as the center, branch, reference, dates, and whether the result was viewed.
  • Security records needed to prevent abuse, investigate incidents, and prove authorized access.

LabInbox is a delivery portal. It does not diagnose, interpret, edit, or make decisions from your medical result.

How access works

We send a one-time code to the mobile number already linked by the diagnostic center. SMS alerts never include a diagnosis, test name, result value, or a public document link. Anyone who controls that SIM may be able to receive the code, so tell your diagnostic center immediately if your number is wrong, lost, reassigned, or shared. The center can revoke a misaddressed result and lock the linked inbox while identity recovery is reviewed.

Who may receive data

Authorized staff of your diagnostic center, LabInbox personnel who need access for an approved support or security task, and contracted infrastructure or messaging providers may process only what is needed for the service. Providers and any cross-border processing must be documented in the center agreement and privacy notice before live use.

How long information is kept

Each diagnostic center must approve a specific retention period based on medical-record duties, patient needs, and legal requirements. When that period ends, LabInbox is designed to remove the PDF from active storage and keep only the minimum audit evidence that the approved policy requires. No production center may be activated without an approved retention period.

Your privacy rights

Philippine privacy law provides rights including being informed, access, correction, objection, erasure or blocking where applicable, data portability, damages, and filing a complaint. Some requests may be limited when a center must keep a medical record or comply with another law.

After signing in, choose Privacy request from your result inbox to record a request without emailing medical details. You may also start with the privacy contact shown by your diagnostic center so it can verify your identity safely and act on the clinical record. LabInbox's production privacy contact is still pending formal appointment and must be configured before live use.

Pre-launch status

This service is not approved for real patient information until the privacy impact assessment, contracts, DPO review, retention schedule, and independent security test are signed off.

LabInbox
PrivacySecurity