隱私權政策 Privacy Policy

English Privacy Policy

1. Scope and single purpose

This policy applies to the Chrome extension medcloud2-fhir-bridge (雲端懷爾抓抓). Its single purpose is to help an authorized healthcare professional obtain clinical reference data for the patient currently displayed in Taiwan NHI MediCloud, convert that data locally in the user's browser into an HL7 FHIR R4 Bundle, and let the user download it or hand it to MediPrisma's browser-local import flow.

The extension is not produced, authorized, or endorsed by Taiwan's National Health Insurance Administration and does not bypass MediCloud authentication or access controls.

2. Data handled

After an explicit user action, the extension handles:

• Identifiers: name, national ID, date of birth, sex, and a patient-context hash used to prevent patient mixing. The extension context and FHIR identifier use a masked value, while raw API responses may still contain direct identifiers.
• Health information: encounters, medications, laboratory and examination records, reports, dental procedures, discharge summaries, rehabilitation, remaining medication days, preventive care, cancer screening, and related clinical reference data.
• Authentication information: the existing MediCloud Bearer authorization is briefly observed and used inside a page-function memory closure only for necessary same-origin requests.
• Website content: the minimum current-patient page content and same-origin API responses required for the requested feature.
• Local preferences and job metadata: de-identification preference, job IDs, timestamps, sizes, resource counts, masked filenames, tab IDs, status, and non-clinical error codes.

The extension does not collect general browsing history, location, payment data, personal communications, advertising identifiers, analytics events, or cross-site tracking data.

3. Use and sharing

Data is used only to verify the current patient, retrieve authorized MediCloud data, perform safety and FHIR validation, convert it to FHIR R4, display progress, remove expired results, and complete the user's selected download or MediPrisma import. It is not used for advertising, marketing, data brokerage, creditworthiness, lending, user profiling, or unrelated model training.

The publisher does not receive patient data, Bundles, raw responses, authorization values, or telemetry. The extension contains no publisher backend, analytics, advertising, tracking, error-reporting SDK, or remote code. MediCloud may retain the authorized user's query logs under its own policies; those logs are controlled by MediCloud/NHIA and are not provided to the extension publisher.

When the user chooses MediPrisma, the extension passes the Bundle once to the browser-local file-import control at https://mediprisma.tw/app/. The Bundle is not placed in a URL, query string, hash, page global, or visible DOM text. Any later use of an optional cloud or AI feature in MediPrisma is outside this extension's control and is subject to the disclosure shown by MediPrisma at that time and the user's organizational rules.

4. Local retention

Raw responses and authentication information remain only in short-lived execution memory. A completed FHIR Bundle may be staged in trusted-context-only chrome.storage.session, capped at 8 MiB and one hour. Download and confirmed MediPrisma import do not consume it; explicit user removal, replacement by a new job or patient switch, expiry, or browser-session end clears it. The extension does not use chrome.storage.sync.

Downloaded files are controlled by the user and their organization. The publisher cannot access or delete them.

5. Security and user choices

The extension uses exact host permissions, HTTPS, repeated patient-context checks, short-lived state, restricted session storage, packaged code only, and a narrow MediPrisma handoff context. Users may choose not to start capture, not to use MediPrisma, not to download a file, or to remove the extension.

6. Children and clinical limitation

The extension is not a general consumer service directed to children. Authorized healthcare professionals may handle a minor patient's data in a lawful clinical context, subject to the same purpose limitations, safeguards, organizational policies, and applicable law.

MediCloud data and the extension's output are clinical reference information, not a diagnosis, treatment recommendation, or official medical record. Users must follow authoritative sources, professional judgment, and their organization's approval, confirmation, signature, and retention processes.

7. Limited Use

The use of information received by this extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

User data is used only for the disclosed single purpose and is not sold, used for personalized advertising, provided to data brokers, or used for creditworthiness or lending.

8. Changes and contact

Material changes to data handling will be prominently disclosed before they take effect, with additional consent where required. They will not be disclosed only by silently editing this policy.

• Publisher: medcloud2-fhir-bridge project (GitHub: voho0000)
• Privacy and support contact: GitHub Issues