MeiSheng Call Washington Consumer Health Data Privacy Policy
Effective October 26, 2026. Provided by MEISHENG TECHNOLOGY.
The Chinese version of this page is a translation provided for convenience. If the two versions differ, this English version controls.
About this policy
Washington's My Health My Data Act (RCW 19.373) protects "consumer health data." That means personal information that is linked, or can reasonably be linked, to you and that identifies your past, present or future physical or mental health. The law protects people who live in Washington and people whose data is collected in Washington.
This policy explains how MeiSheng Call, an iPhone app made by MEISHENG TECHNOLOGY ("we" or "us"), collects, uses and discloses consumer health data, and how you can use your rights. Our MeiSheng Call Privacy Policy covers all other data, including how long each service provider keeps data.
What consumer health data we may collect
MeiSheng Call does not ask you for health information. But when you use it to call a doctor, clinic, pharmacy, hospital, insurer or other health business, the call may include:
health conditions, symptoms, diagnoses, tests and treatments;
medicines and prescriptions;
the fact that you are seeking health care, such as an appointment;
health insurance details, such as your insurer and member number, and your date of birth.
This information can be in:
the live sound of the call, which we send for speech recognition but do not save;
the call transcript (Chinese and English text);
the text we send to be spoken (English, and in calls between MeiSheng Call users, Mandarin or Cantonese text to be spoken to the other user);
the words of texts you write in MeiSheng Call, which pass through our server and Google only while being translated and are not kept;
the insurance member ID and date of birth you save in My Info (your own and the family members' you enter): they stay on your phone (with iCloud Keychain on, they sync to your other Apple devices, encrypted end to end so we can't read them); only when the other person asks and you tap Allow does your phone itself make the sentence that is spoken to them (on a call about a family member's health or insurance, only that family member's details, after they have agreed). The audio passes through our server and Twilio; we don't transcribe or keep it, and the transcript shows only a placeholder like "[member ID]";
the words your phone reads from a photo for Photo Translate (for example an insurance card or a medical bill): the photo stays on your phone, and the words pass through our server and Google only while being translated and are not kept; text that looks like lab results or medication instructions is stopped on your phone and not sent for translation, and our server checks again before sending anything to Google;
messages between MeiSheng Call users (MeiSheng Chat, currently open only to the team), which (including photos and voice messages) are end-to-end encrypted, so our server relays only ciphertext it cannot read and deletes it once delivered (within 7 days if not delivered); when they need translating, the text passes through our server and Google before it is encrypted and is not kept; voice messages are turned into text on the sender's phone and the audio is not uploaded; and, if you report them, are kept as described in our Privacy Policy;
notification previews: if you allow notifications and leave "Show Text in Notifications" on, the first few dozen characters of a text, voicemail or message pass through Apple's push notification service.
Under this law, voice recordings that a voiceprint can be taken from are biometric data. We do not save call recordings, and we do not create voiceprints. Deepgram confirmed in writing on October 22, 2026 that it does not create or keep voiceprints, speaker profiles or other biometric data from our calls; Cartesia receives only the text to be spoken, never anyone's voice.
Where it comes from
From you: what you say, type or tap during a call, texts you write, and the words read from photos you use with Photo Translate.
From the person or business you call: what they say after hearing our opening message.
We do not buy health data or get it from other companies, apps or devices. We do not collect location data, and we do not set up geofences around places that provide health care.
Why we collect it and how we use it
We collect consumer health data only as needed to provide the service you ask for:
to interpret your call live: turn speech into text, translate it, and speak the English;
to show you captions during the call;
to keep the transcript for 30 days so you can read it again (you can delete it sooner);
to translate texts you write, messages between MeiSheng Call users, and the words read for Photo Translate;
We do not use it for advertising, to train AI models, for analytics, or for any other purpose. We do not sell it. If we ever want to collect other kinds of consumer health data, or use it for another purpose, we will update this policy and ask for your consent first.
If you mark a call as medical or insurance, the person you call must press 1 to agree before we transcribe what they say. If they do not, the call ends.
Health information about other people
MeiSheng Call is for your own calls about your own matters. To call about a family member's health, for example to book their appointment or ask about their bill, that family member must agree first, themselves. You create a consent link in the app and send it to them. They open it on their own phone, confirm it is them with a code we text to their number, read what we collect, what we use it for, which service providers receive it, how long we keep it and how to withdraw, and then agree separately to collection and processing, and to sharing with those service providers. Only after both can you choose that family member when you place a call. They can withdraw at any time with the same link, and withdrawal takes effect right away. We do not yet support this for family members under 18.
Without that step, our Terms of Use do not allow you to give or ask for health information about another person who can be identified. We do not look for this kind of information. If it still ends up in a transcript, it is kept only as part of that transcript, for no more than 30 days, and the person it is about can ask us to delete it.
Who we disclose it to
We do not sell consumer health data, and we do not share it with any affiliate.
Our phone network, Twilio. The sound of every call passes through Twilio, so Twilio receives any consumer health data spoken on a call. Under Twilio's terms, Twilio is an "independent controller" of call content, including voice, and may use it for its own purposes: to prevent abuse of its services (including training its own models for that purpose), to develop and improve new products and services, and for business analytics and internal reporting. Under Washington law, this may count as sharing consumer health data with a third party. The one category of third party we share consumer health data with is this one: the telecommunications provider that connects our calls.
Processors. We also disclose it to service providers that handle it for us only to provide MeiSheng Call:
Speech recognition: Deepgram, which under the settings we chose does not use the data to improve its models and keeps no audio or text after processing (we are in the process of signing its data processing addendum)
Translation: Google Cloud (Gemini on Vertex AI), which under its data processing terms processes data only to provide its service to us
Cantonese voice: Google Cloud (Cloud Text-to-Speech), which receives only the text to be spoken to a Cantonese-speaking user and, according to Google's documentation, does not log the text or audio it synthesizes
Voice: Cartesia, which receives only the text to be spoken. Its data processing agreement applies once its terms of service are accepted at sign-up. On October 23, 2026 it told us in writing that it has no fixed retention period and deletes data when we ask, usually within 90 days
Servers: a company that rents us servers in the United States
Email: the email service we use when you write to us
What each one gets, how it uses it, and how long it keeps it is listed in our Privacy Policy. We may also disclose data when the law requires it, such as a valid court order.
Your rights
If you are a Washington consumer, you have the right to:
confirm whether we collect, share or sell your consumer health data, and see that data;
get a list of the third parties and affiliates we have shared or sold your consumer health data to, and a way to contact them;
withdraw any consent you have given us;
have your consumer health data deleted, including copies held by our processors and by third parties we shared it with;
appeal if we turn down your request.
We will not treat you differently for using these rights.
How to use your rights
Delete in the app. Delete a call on the end screen, or use Delete MeiSheng Call Data or Delete Meisheng Account in Settings. The data on our server is deleted right away.
Email us. Write to support@meishengcall.com with the subject "Washington health data request" and tell us what you want. If you do not use MeiSheng Call (for example, you received a call made with it), include your phone number and the date of the call.
Checking that it is you. We may ask you to show that the request is yours, for example with a code sent to the email or phone number on your Meisheng Account, or to the phone number that received the call.
Timing. We will act on your request within 45 days after we receive it. If we need more time, we will tell you why within those 45 days and may take up to 45 more days. We do not charge for requests.
Deletion. When we delete your data, we also tell our processors, and any third party we shared it with, to delete any copies they still have. Our database backups on the server rotate every 14 days, and a backup copy on our company's own computer rotates every 30 days, so data we delete is gone from backups within 30 days.
Appeal. If we turn down your request, you can appeal by replying to our answer with the word "Appeal". We will tell you our decision in writing within 45 days, with our reasons. If we deny your appeal, you can file a complaint with the Washington State Attorney General: www.atg.wa.gov/file-complaint
How we protect it
Only people who need it to run MeiSheng Call can access it.
It travels between the app and our servers over encrypted connections.
Transcripts are never written to our logs.
Changes to this policy
If this policy changes, we will update this page and the effective date above. Before we collect other kinds of consumer health data or use it for a new purpose, we will ask for your consent.