This page explains how to request deletion of your data from MediShards, depending on your relationship to the Service. We respond within 7 business days and complete deletion within 30 days of verifying your identity.
1. If you connected a Facebook or Instagram account (clinic staff)
This section applies to anyone who used Facebook Login to connect a clinic’s Page or ad account to MediShards.
Step 1 — Disconnect inside the product (immediate)
- Sign in at app.medishards.com.
- Go to Settings → Meta.
- Click Disconnect.
Disconnecting deletes your account’s access tokens immediately and stops any further receipt of data from Meta.
Step 2 — Request deletion of previously received data
To delete what we received from Meta before disconnection (Page and ad-account data, Lead Ads submissions, ad metrics), send us a request stating the clinic name and the email address on the account:
- Email: mohamed.a.hassan23@gmail.com (subject: Data deletion request)
You can also remove MediShards from your Facebook settings: Settings & Privacy → Settings → Apps and Websites → MediShards → Remove. This revokes access on Meta’s side; we recommend doing it together with Step 1.
2. If you are clinic staff and want your account deleted
- Ask the clinic owner to deactivate your account from Settings → Team, or
- Contact us directly by the channels above, stating the clinic name and your email address.
We delete your personal account data (name, email, phone, sign-in credentials). Actions you performed remain in the clinic’s records (for example, an invoice you issued) because they are part of the clinic’s records and legally required — but they are no longer linked to your contact details.
3. If you are a patient
Your medical data belongs to your clinic, which is its controller and has the tools inside the Service to fulfil your request. Therefore:
- Contact your clinic first and ask for your record to be deleted or corrected.
- If you cannot reach the clinic, contact us by the channels above and we will route your request to the clinic and follow it up with you.
If your data reached us through a lead form in a Facebook or Instagram ad and you never became a patient of the clinic, you may ask us directly to delete it, stating the phone number you used in the form.
4. If the clinic wants to end its subscription and delete all its data
- Export your data from inside the Service (reports and exports are available to the clinic owner).
- Notify us of the termination by the channels above.
- You have 30 days after termination to export; the clinic’s data is then fully deleted from live systems within 90 days and ages out of backups on their cycle.
What we may retain after deletion, and why:
- Financial records (invoices, payments) for the period Egyptian law requires.
- Security and audit logs in a form that does not identify individuals.
- Anything we must retain to comply with a court order or legal obligation.
5. Identity verification
To protect your data, we may ask you to confirm the request from the email address or phone number registered on the account before we act on it. We notify you when deletion is complete.