Last updated: 09/10/2026
Medics Express (“we,” “us,” “our”) operates the Medics Express mobile app and the website at medicsexpress.com. This policy explains what personal data we collect, why we collect it, how we protect it, and what rights you have over it, whether you’re a healthcare professional using our app, a healthcare institution getting in touch with us, or simply a visitor to this website.
We’ve written this to say plainly what we actually do. If anything here is unclear, contact us at contact@medicsexpress.com and we’ll answer directly.
Who we are
Medics Express is operated by MEDICS EXPRESS, registered at No. 18 Imgbi Road, Amarata, Yenagoa, Bayelsa State, Nigeria. We are responsible for how your personal information is handled, as described in this policy. We handle personal data in line with the Nigeria Data Protection Act 2023.
What we collect
If you use the Medics Express app (healthcare professionals):
Account information, collected when you register: full name, email address, phone number, sex. If you choose to sign in with Google, we receive your name and email address from Google.
Professional information, collected during registration and profile setup: profession and specialties, council registration / credential details (registration number, issuing body, dates), academic qualification, year of graduation, school attended, years of experience, current employment details (institution, department, rank, and leave month), availability for short-term work and long-term job preferences (including any free-text notes you choose to add), and past employment history, if you choose to add it (optional). If you submit an application letter, we store it.
Documents and photos, uploaded by you where this feature is available in your version of the app: council registration / license documents, a government-issued national ID, CV, certifications, professional indemnity insurance where applicable, and a profile photo if you add one.
We collect a government-issued ID specifically to verify your professional identity as part of what makes the “verified” badge on your profile mean something. It is stored privately and is never displayed publicly.
Bank details, doctors only: if you are a doctor, you can add your bank details (Account Name, Bank Name, Account Number) to your profile after you have been matched to an assignment. We collect them so that payment for that assignment can be arranged as we forward your details to the hiring institution.
Agreement records: when you sign up, we show you our maintenance-fee terms, including the fee or rate that applies to your profession. When you accept them, we record that you accepted, the date and time, and the fee or rate we showed you.
Messages, if you use the in-app Inbox to contact our support team or (once available) an AI assistant: we store the content of those messages so we can respond and keep a record of what was discussed.
Staff notes on your account: if our team has a concern about your account, for example a document we cannot verify, a dispute with an institution, or a deletion request that raises a concern, an authorised staff member can record a hold on your account with the reason for it. See “Deleting your account” below.
If you contact us through the website:
If you use a contact or “partner with us” form on medicsexpress.com, we collect whatever you enter into that form, typically your name, email address, phone number, and the message itself.
What we do not collect:
We do not use any advertising tracking. We do not collect your device’s location; any location information in your profile (like preferred work locations) is text you type in yourself, not GPS data. We do not collect payment card details through the app or website. As of this policy’s last update, we do not use website analytics or tracking cookies. If that changes, we’ll update this section and this policy’s “last updated” date.
Why we collect it (legal basis)
We process your personal data on the following bases: to provide our service to you, because verifying your credentials, matching you with institutions, arranging payment for assignments, and enabling the app’s core functions requires the data described above; with your consent, for anything not strictly necessary to deliver the service, where we’ll ask first; and legitimate interest, meaning we keep accurate records of verification decisions, match history, and your acceptance of our terms, so that placements can be defended and disputes resolved fairly, for both you and the institutions we work with. We also have a legitimate interest in protecting institutions, patients and other professionals from falsified credentials or documents, which is why we may keep records for longer in the limited cases described under “Deleting your account.”
How we protect your data
Every table in our database has row-level security enforced; your professional record is readable only by you and by authorized Medics Express staff, never by other workers or the public. Uploaded documents (including your national ID) are stored in a private file storage system, not a public one. When you or our staff need to view a document, we generate a temporary, time-limited link rather than exposing a permanent public URL. Passwords are handled by our authentication provider and are never stored or visible to us in plain text. Access for our own staff is role-based; only staff members whose role requires it (verification, recruitment, or admin) can see the information relevant to their work.
Who we share it with
We do not sell your personal data, and we do not share it with advertisers.
We use Supabase as our backend data processor; your data is stored on Supabase’s infrastructure, under our control and instruction, not shared with Supabase for their own purposes. Your personal data is stored on Supabase’s infrastructure in Ireland (EU), not within Nigeria. This means your data is transferred outside the country to be processed and stored. Ireland is subject to the EU’s General Data Protection Regulation (GDPR), one of the more stringent data protection frameworks in use globally, and Supabase is contractually bound to handle your data under our instruction, for our stated purposes only.
If you choose to sign in with Google, Google acts as the sign-in provider and shares your name and email address with us. Google’s own use of your data is governed by Google’s privacy policy. Deleting your Medics Express account does not delete your Google account.
Healthcare institutions we work with see the professional information relevant to a match (your profession, credentials, verification status, and relevant experience), never your uploaded identity documents directly, and never your raw contact information until a match is actually made.
We do not currently use any third-party analytics, advertising, or crash-reporting tools in the app.
How long we keep your data
We keep your account and professional information for as long as your account is active. Certain changes to your employment details and availability are logged in an internal audit trail that records what your profile said at a given point in time. This exists to protect the accuracy of past placements if a question is ever raised about what was true when a match was made, and is accessible only to authorized staff. The audit trail is deleted together with your account, unless a hold applies (see below).
Deleting your account
You can ask us to delete your account at any time, from inside the app (Profile, then Delete account) or by following the steps on our account deletion page at medicsexpress.com/delete-account.
What happens, step by step:
1. Straight away, your account is deactivated. You can no longer use it and institutions can no longer see it.
2. For 30 days, your data stays in place but unused. If you change your mind in that time, email contact@medicsexpress.com and we will reactivate the account. We use this period to check whether we need to keep anything (see “Holds” below).
3. After 30 days, we permanently delete your profile, professional information, uploaded documents and photos, bank details, messages, agreement records and audit trail, and your login. This cannot be undone.
If you registered but never completed your profile, there is nothing for us to check, so your account is deleted immediately.
Holds. If, when you ask to delete your account, we have a documented concern about it, such as a document we have reason to believe is falsified, a credential we could not verify, a dispute with an institution, or an enquiry from a regulator, an authorised member of our staff can place a hold on the account. While a hold is in place we keep the records needed to look into the concern and to defend our decisions, and we do not delete them. We record who placed the hold and why. A hold is released, and your data deleted, once the concern is resolved. We will tell you if a hold applies to your account and why, unless we are legally prevented from doing so. A hold is not used for any other purpose, and it is never placed just because you asked to delete your account.
Placements. If you have been placed with an institution, we keep the placement record and the details attached to it for [2 years], because it is part of our financial records and we may need it to resolve a dispute or meet a legal duty. Because of this, deletion for these accounts is handled by our team rather than by the in-app button: email contact@medicsexpress.com and we will tell you exactly what we have to keep and why, and delete the rest.
Backups. Our database provider keeps backups for a limited time (30 days). Deleted data can remain in those backups until they expire.
Anything else we are legally required to keep, we keep only for as long as the law requires.
Your rights
Under the Nigeria Data Protection Act 2023, you have the right to: access the personal data we hold about you; correct inaccurate or outdated information; request deletion of your data, subject to the holds and records described above; object to or restrict certain processing; withdraw consent at any time, where our processing is based on consent; and data portability, where applicable. To exercise any of these rights, contact us at contact@medicsexpress.com. We will respond within 30 days.
If you are not satisfied with how we handle your data, you can also complain to the Nigeria Data Protection Commission (NDPC).
Government ID specifically
Because we collect a national ID document to verify your professional identity, we want to be direct about this rather than bury it in a general “documents” mention: this document is used solely for identity verification, stored privately, accessible only to authorized verification staff, and never shared with institutions or displayed on your public profile. It is deleted with the rest of your account, unless a hold applies.
Children’s privacy
Medics Express is intended for licensed and in-training healthcare professionals and is not directed at children. We do not knowingly collect data from anyone under 18.
Cookies and website tracking
As of this policy’s last update, medicsexpress.com does not use tracking cookies or analytics. If we introduce analytics or marketing cookies in the future, we’ll update this section, including what’s collected and how to opt out, before doing so.
Changes to this policy
If we make material changes to this policy, we’ll update the “last updated” date above and, where the change is significant, notify app users directly.
Contact us
Questions about this policy or your data can be sent to contact@medicsexpress.com.