Last updated: 17 October 2026
This privacy policy applies to the Health Switch RSA app (the “App”)
for iPhone, published on the App Store as com.brynne98.health-switch-rsa,
and for Android, published on Google Play as com.brynne98.healthswitchrsa.
The App is a directory of South African hospital telephone numbers and speed dials for clinicians. It has no sign-up and no sign-in. We collect the minimum needed for the App to work, and this page says plainly what the third-party services we use collect on our behalf.
The App is published by Brynne Prince, an individual developer in South Africa, who is the responsible party for this information under the Protection of Personal Information Act (POPIA). The App is offered in South Africa only. Brynne Prince is also the Information Officer: send any privacy request or complaint to brynneprince98@gmail.com. Our PAIA Manual lists the records we hold and how to ask for them.
The App never asks for patient information and must not hold any. Do not type patient names, folder numbers, diagnoses or other health information into a number, a report, an idea or the Send private feedback screen. We delete any we find.
POPIA lets us process personal information only for a lawful reason. Ours are:
Giving us information is voluntary. You can read the whole directory without contributing, sending feedback or buying anything.
The directory ships inside the App and is read on your phone. Looking up a hospital or a number sends nothing anywhere. The App checks for newer directory entries when it has a connection, which sends a timestamp and nothing about you. It also checks for updates to the App itself; see EAS Update below.
The numbers come from hospital directories that clinicians built on Accurx Switch, carried over with Accurx’s permission before that service closed to South Africa. They are hospital extensions and ward numbers, not personal numbers. If you find a personal number in the directory, report it in the App or email us and we will remove it.
You do not need to use the App for this section to apply to you. Some entries carry the name or role of the person who answers a hospital line, because the hospitals’ own directories listed them that way. We hold these work contact details for one purpose: so that healthcare workers can reach the right service quickly. We do not use them for anything else, sell them, or send them to advertisers or to the analytics services below.
If an entry names you, or lists a number you do not want listed, email us at the address at the end of this page, or report the number in the App. We will remove it from the App or correct it, and you do not have to give a reason. Earlier versions of the entry stay in our records, so a bad edit can be undone. Ask, and we will delete those too.
Your favourites, your recent hospitals, your appearance choice and which numbers you have reported are stored on your phone using the operating system’s standard storage. They never leave it. (Reports themselves go to our server; see below.)
Anyone can add, correct or report a number. When you do, the App quietly creates an anonymous identity for your installation so that your changes can be attributed to one another and, if needed, undone together. This identity is a random token. It is not your name, email address, phone number or professional registration, none of which the App ever asks for.
What is stored on our server when you contribute:
Contributions are shared with every other user of the App, because that is the point of a shared directory. Previous values are kept so a bad edit can be reverted. Nothing you contribute can be traced to you unless you put identifying details into the text yourself.
Our server is hosted by Convex (convex.dev) in the United States. Convex’s privacy policy: https://www.convex.dev/legal/privacy
The App sends a small set of events to PostHog’s EU-hosted service so we can see which parts of the App are used and where the directory has gaps. These events include:
We never send the words you searched for, because staff names are in this data. We never send your name, email address or advertising identifier. PostHog assigns a random identifier to an installation so we can measure return usage. Session replay and automatic touch or text capture are disabled. PostHog receives your IP address with each event, but looking up a location from it is disabled.
PostHog’s privacy policy: https://posthog.com/privacy
If the App crashes or hits an error, it sends a report to Sentry’s EU-hosted service in Germany so we can fix it. A report includes:
Crash reports never include your name, email address, the words you searched for, or anything shown on screen. Screen recording and performance tracing are switched off.
Sentry’s privacy policy: https://sentry.io/privacy/
The App measures how long it takes to open and sends those timings to Expo’s EAS Observe service, so we notice if an update makes it slower. It sends:
Nothing from the directory, your searches or your contributions is sent.
The App can receive small updates without a new store download. When it opens, it asks Expo’s servers whether an update is ready, sending the App version, the update it is running and a random identifier for the installation. It also sends one launch event to EAS Insights with the same random identifier, the App version and the operating system version, so we can count how many phones run each version.
Expo is based in the United States. Expo’s privacy policy: https://expo.dev/privacy
Phones without Pro see one small sponsored bar, served by Google AdMob. The first time the bar is about to appear, the App may ask:
If you say yes, AdMob may collect your advertising identifier and usage data (which screens you opened, ad interactions) to pick and measure ads. In South Africa Google shows no consent form, so on Android ads may be personalised unless you delete or reset the advertising ID as above. If you say no on iPhone, AdMob does not get your advertising identifier, but it may still use other signals to pick ads. Whatever you answer, AdMob also sees your IP address, which gives an approximate location (about city level), to serve ads and stop fraud. Nothing in the App changes either way. Buying Pro removes the bar and stops all of this.
Google’s privacy policy: https://policies.google.com/privacy How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites
Each time the App opens, it asks RevenueCat whether this phone has Pro. RevenueCat also handles buying Pro and Restore purchases: it checks the purchase with Apple or Google and remembers it across reinstalls. RevenueCat may collect:
RevenueCat does not receive your name, email address or anything you typed into the App.
RevenueCat’s privacy policy: https://www.revenuecat.com/privacy
On iPhone, Apple processes the payment through your Apple Account; on Android, Google Play processes it through your Google account. We never see your payment details. Their privacy policies apply to that flow: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy
Only the services named above, and only for the purposes given for each. We do not sell personal information. Each service processes data for us under its own terms and data protection agreement. Contributions are shown to every user of the App, as described above.
Our server (Convex) and Expo’s services are in the United States. PostHog and Sentry use EU servers. Google, Apple and RevenueCat may process data in the United States and other countries. POPIA section 72 allows this because each service is bound by its terms and data protection agreement to protect the data to a standard similar to POPIA.
All data between the App and these services travels encrypted (HTTPS). The anonymous identity used for contributions is kept in your phone’s secure storage. Only the publisher has admin access to the server and the services’ dashboards. If a breach affects your information, we will tell the Information Regulator and, where we can reach you, you.
We keep no copies of what those services hold.
The App is made for clinicians and is not directed at children. POPIA treats anyone under 18 as a child. Someone under 18 may use the App only with a parent’s or guardian’s consent (see the Terms of Use), and the App then collects the same anonymous data as for anyone else. A parent or guardian may email us to have it deleted.
Under the Protection of Personal Information Act (POPIA) you may ask what we hold about you, ask for it to be corrected or deleted, and object to its processing. Because we cannot tell which phone is yours, deleting the App is the only way to stop analytics and crash reports from it. Because nothing we hold is linked to your name or email address, we may not be able to find a particular installation from your contact details alone. If you tell us the approximate time and content of a contribution, we can find and remove it.
To delete your data, email brynneprince98@gmail.com. Tell us roughly when you sent feedback or made a change, and what it was. We will delete that feedback, and any entry or change you ask us to remove. Numbers that other clinicians rely on may stay in the shared directory unless they are personal or you ask us to remove a specific one. You do not need an account, and we never ask for proof of who you are beyond what is needed to find the data. We reply within 30 days.
You can opt out of personalised advertising at any time through Apple’s tracking setting, Android’s ads settings or, where it is shown, the App’s Ad choices row, stop advertising entirely by buying Pro, and delete everything on your phone by deleting the App.
We may update this policy as the App changes or as the law requires. The date at the top always shows the latest version. Material changes will be announced in the App’s release notes.
Questions about this policy or about your data:
Email: brynneprince98@gmail.com
If you believe we are not complying with this policy, please email us first. You also have the right to complain to the Information Regulator of South Africa at any time: