Privacy policy

Last updated: August 5, 2026

360Care is provided by Ellerca Health Corp., 100 Queen Street West, Suite 1009, Brampton, Ontario, L6Z 1A4.

This policy explains what the 360Care app collects, why, and what you can do about it. It covers the app and this website.

Who 360Care is for

360Care is for people already enrolled in a participating 360Care program. There is no public sign-up. Your chart is created by your clinic, and you sign in using the phone number or email address your care team already has on file.

What we collect

When you sign in. The email address or phone number you enter. We use it only to find your record and send you a one-time code. There is no password.

From your health record. Your name, date of birth, the members of your care team, and your appointments. This information comes from the clinical record your care team already keeps. The app displays it to you; it does not create it.

When you book a visit. The appointment type, date and time you choose, and anything you write in "what should we focus on?". That last field is health information: it is stored with your appointment and your care team can read it.

Your device's time zone, so your visits are shown in your local time.

What we do not collect

• No advertising identifiers, and no tracking of you across other apps or websites.
• No analytics or usage tracking. The app has no analytics service configured.
• No crash or diagnostic reporting.
• No location. The app never asks for or uses your device's location.
• No contacts, photos, or files, other than what you choose to share with your care team.
• We do not sell your information, and we never will.

How your information is used

Only to run the service: to sign you in, show you your care team and visits, let you book and cancel appointments, and connect you to a video visit. Nothing else.

Where your information is stored

Your information is stored on servers in the United States (Oregon). It is protected by contract and by the security measures described below, and it may be subject to lawful access requests under United States law. If you would prefer your information not be stored outside Canada, contact us atprivacy@360care.ca before using the app.

Who else handles your information

We use a small number of service providers who process information on our instructions and are not permitted to use it for their own purposes:

• Twilio to send login codes and appointment messages by text.
• Resend to send login codes and appointment confirmations by email.
• Daily to host video visits.
• Amazon Web Services and Render for hosting, storage and encryption.

Video visits and recording

Video visits are recorded, and we ask you first. You are asked to consent before any recording starts. If you do not consent, the visit is not recorded: recording is switched off for that visit, not merely left unused. If you withdraw consent, recording stops.

We record in order to write up your visit. The recording is turned into a written summary that your care team reviews and keeps in your health record. That written summary stays in your health record even after the recording itself is gone, and is kept by your clinic under the rules that apply to health records.

Recordings are held by Daily, our video provider, on servers in the United States.

We keep a recording for up to 7 days, and then delete it. The written summary of your visit stays in your health record, as described above; the recording itself does not.

How long we keep it

Your clinical record is kept by your clinic under the rules that apply to health records.

Login codes expire after 10 minutes. Sign-in sessions expire and are renewed while you use the app; signing out or deleting the app ends them.

If you ask us to delete your account, we keep a record of the request and of what we did about it, for as long as we are required to.

Deleting your account

You can ask us to delete your account from Settings > Delete account in the app.

You can also ask without using the app, at https://symphony.revella.health/account-deletion. We confirm it is you by sending a one-time code to the phone number or email on your record.

Nothing is deleted the moment you ask. A person reviews the request and contacts you first, because your clinic may be required to keep parts of your health record by law. We will tell you what can be deleted and what cannot.

Your rights

Under Canadian privacy law you can ask to see the personal information we hold about you, ask us to correct it, and ask us to delete it. Contact privacy@360care.ca. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.

Security

Sign-in uses a one-time code rather than a password. On your device, your session is stored in the operating system's secure storage, and you can require Face ID or your device biometrics to open the app. Information in transit is encrypted, and information at rest is encrypted by our hosting providers.

Children

360Care is not intended for children. You must be 16 or older to take part in a 360Care program, and accounts are created by clinics for enrolled members. We do not knowingly collect information from anyone under 16.

Changes

If we change this policy we will update the date at the top and, where the change is significant, tell you in the app.

Contact