Find Care

Legal

Privacy policy

Last updated · 2026-05-17

Jump to section

This Privacy Policy explains how Naija Finder (“we”, “us”, “our”) and our products collect, use, and protect your information. This starts with Find Care. By using any Naija Finder product, you agree to the practices described below.

Naija Finder is incorporated and operated in Nigeria. We comply with the Nigeria Data Protection Act 2023 and the framework that came before it, the Nigeria Data Protection Regulation 2019. Where we serve users outside Nigeria, equivalent regional protections apply.

Who we are

Naija Finder is the operating company behind our products. These include Find Care (live now) and other apps or sites we may release from time to time. This Privacy Policy describes how we handle privacy overall. A specific product may show extra notices when you use sensitive features, such as trip sharing or voice input. We are not a medical advice service, a financial advisor, or a property lawyer. We are a directory and discovery tool. Always seek qualified professional services where you need them.

Accounts later. Find Care today does not require sign-up. We may add optional or required sign-in on some products. Section 2 describes anonymous use today and what we may collect if you sign up, such as your name, mobile number, email, or device information. We will always update this policy and our in-app or store disclosures when that happens.

Contact for privacy matters: privacy@findnaija360.com.

Anonymous-by-design what this actually means

For Find Care and our other consumer products today, we do not require sign-up or login to use core discovery features. By design, we do not ask for your name, phone number, email, or government ID in the app for those features. The main exception is when you choose to contact us through the contact form (see below). That form collects what you type so we can reply.

Later products and accounts. If we add accounts or sign-in on a product, we may collect personal information you provide or that the product needs. For example your name, email address, mobile phone number, business or host details, and device or technical information such as device model, OS version, or app build. We use this for security, support, fraud prevention, or service delivery. We will tell you exactly what we ask for at sign-up or in the product. We will update this Privacy Policy and only use that data for the purposes we describe there.

What we DO use (anonymous-first mode and optional features):

2.1 Anonymous device identifiers + usage reporting

In anonymous-first mode (for example Find Care when you have not created an account with us), a randomly-generated identifier is stored in your device’s local storage. This is the browser localStorage on web, and Capacitor preferences on mobile. It changes automatically every 365 days. We use it only to count unique devices for usage analytics and to avoid counting the same event twice. In that mode it is not linked to your name, email, phone, or any account or external identifier we hold about you. This is because we do not collect those things for core app use, unless you use the contact form or, in the future, sign up for an account.

Reporting data (anonymous mode). We also store anonymous usage events in our backend (see Supabase below) so we can run the product and understand overall patterns. For example: searches, hospital detail views, in-app navigation starts, phone or WhatsApp taps on a listing, state selection, session starts, optional app-install signals, and non-personal ad-slot impressions or clicks when advertising is enabled. While you use the app without an account, each row is tied only to the rotating anonymous id and small technical fields, such as which Nigerian state the session was using. We do not attach your real-world identity to those events. Our internal reporting is built from counts and trends, not from following individual users. If we later tie usage to a signed-in account, we will describe that in an updated policy and at sign-up.

2.2 Location data (Find Care and other map-based products)

Collected only when you grant location permission through the system prompt, and only while the relevant feature is active. It is used only to: (a) sort results by distance from your current position, (b) draw a route from you to a chosen destination, and (c) update a live trip-share if you have started one. The app does not keep a history of your locations on our servers. Live coordinates are sent over a short-lived real-time channel (see Supabase under third-party services below). They are not written to our database as a location history.

2.3 Device-stored preferences

This covers your chosen theme, voice, and display name (which is optional and never uploaded). It also covers your saved items, such as saved hospitals in Find Care or similar lists in other products. It includes small technical flags too. For example, a record that location permission was granted, whether your device last appeared to be inside Nigeria (used to tailor features such as the emergency-call shortcut), and an active shared location you are currently viewing. This data is stored only on your device. It never leaves your device unless you choose to start a trip-share or fill in a contact form.

2.4 Trip-share data (Find Care — optional, opt-in)

When you tap Share trip, we create a random share ID. We then publish your live coordinates, destination, ETA, and route polyline to a real-time channel tied to that ID. Anyone with the share link can view this data until you arrive or end the trip. It also expires on its own if the app goes quiet for about 30 minutes. We do not save trip-share data to a database.

2.5 Microphone (Find Care — optional, opt-in)

Collected only when you tap the microphone button inside the in-app helper, and only while you are speaking. Your audio is processed by your device’s built-in speech engine (Google on Android, Apple on iOS, Web Speech API on the web), which returns a text transcript. Naija Finder receives only the transcript, never the raw audio. We do not record, save, or send your audio to our servers under any circumstances.

2.6 Shared location links and shared content

Find Care lets you find hospitals around a location someone sends you. It also lets you open a location shared into the app from another app, such as WhatsApp or a maps app.
  • Pasted Maps links. When you paste a map link, Find Care turns it into coordinates. If it is a shortened link, the link is sent to a Naija Finder server endpoint that follows the redirect and reads the place name. That place name is then geocoded into coordinates by Mapbox (see section 3.1). The link is processed only to work out the location.
  • Content shared from other apps. When you use your phone’s share sheet to send a location into Find Care, the shared text is read only to find a location in it. The raw shared text is then discarded.

We do not store the links you paste, the text shared into the app, or the resolved coordinates on our servers as a history. An active shared location is kept only on your device for the current session (see section 2.3) so the feature still works after a refresh. It is cleared when you exit it or fully close the app.

2.7 Contact form submissions

When you fill in the form on /contact we store the name, email, topic, and message you provide in our admin inbox. This lets an authorised member of the Naija Finder team read and reply. We also record the IP address and browser user-agent of the request for abuse prevention only, meaning rate limits and spam filtering. Apart from any account sign-up we may offer on other products in the future, this is the main voluntary path where we collect personal information today. We collect it only because you chose to send it. We do not use this information for marketing, share it with third parties, or link it to any anonymous activity. To ask us to delete a message you sent us, email privacy@findnaija360.com from the same address you used to submit it. We will remove the row within 7 working days.

2.8 What we do NOT collect

Health information of any kind. Symptoms, conditions, treatments, prescriptions. Patient records. Photos or biometric data. Contact lists, social-graph data. Calendar / SMS / call logs. Background audio (the microphone is only engaged while you actively use voice input in the in-app helper, and only for speech-to-text on your device).

Third-party services

Naija Finder products use the following third-party services. Each has its own privacy policy that covers the data it receives.

3.1 Mapbox (maps, directions, and geocoding)

Provides map tiles, the Directions API, and the Geocoding API in Find Care and any other product that uses Mapbox. It receives your current coordinates and destination coordinates when you work out a route. It also receives a place name when we turn a shared map link into coordinates (see section 2.6). Privacy policy: mapbox.com/legal/privacy

3.2 Supabase (real-time + database)

Hosts our backend database. This holds directory listings such as hospitals, and anonymous analytics events where enabled. It also hosts the short-lived broadcast channel that powers live trip-share. Data is encrypted in transit (HTTPS / WSS). Privacy policy: supabase.com/privacy

3.3 Capacitor (mobile-app shell)

Capacitor by Ionic wraps the Naija Finder web app into the native iOS and Android apps. It does not collect data on its own. It connects OS APIs such as text-to-speech, the share sheet, and speech recognition to our app. Privacy policy: capacitorjs.com/legal/privacy-policy

3.4 Advertising (when enabled)

When advertising is enabled, Naija Finder uses contextual ads only. These are ads chosen based on the page or query you are viewing, never based on your identity, browsing history, or any profile we built. If a third-party ad SDK (Google AdMob) is enabled, we force non-personalized advertising (npa=1). The AdMob SDK still receives the same coarse device and IP signal it always does for any ad request. We never link this to any other identifier.

How we use your information

We use the information described in section 2 for the purposes below:

  • Operating the product you’re using — finding hospitals near you, drawing a route, etc.
  • Aggregate, anonymous usage analytics — how many devices opened the app this month, how many searches were run, which states are most active. We do not profile individual users.
  • Running trusted service providers — where needed, sharing relevant data with third-party processors that help us run core app features. For example maps, infrastructure, messaging, support tools, security, fraud prevention, payments, or account services if introduced later. We require those providers to process data only for agreed purposes, under contractual and legal safeguards.
  • Legal, safety, and compliance uses — preventing abuse, enforcing our terms, handling lawful requests, and meeting obligations under applicable law.

We do not sell your information. We share data only with the service providers that help us run the app, listed in section 3, and only so those features can work. We may also disclose data where the law requires it, or to protect users and the service. If advertising is ever enabled, any partner data use stays within what this policy and section 3 describe.

Data retention

  • Location data: never stored on our servers. Held only in device memory while the app is open.
  • Trip-share data: ends when you arrive or end the trip, and auto-expires after about 30 minutes of inactivity.
  • Anonymous analytics events: may be kept for a long period. This supports long-term reporting, product planning, fraud or abuse analysis, and legal or audit needs. We keep raw and derived analytics data for as long as is reasonably necessary for these purposes. We may keep fully aggregated or de-identified trend datasets for longer.
  • Device-stored preferences + saved items: stay on your device until you uninstall the app or clear its storage.
  • Contact form submissions: retained for as long as your inquiry is open + 12 months for legal / audit purposes, then deleted.

Your rights under Nigerian law

Under the Nigeria Data Protection Act 2023 you have the right to:

  • Access any personal data we hold about you. Today, that is mainly your contact-form submissions (see section 2.7). If we introduce accounts, this will also include account and profile data tied to you, as described when you sign up.
  • Request correction of any inaccurate personal data.
  • Request deletion of your data (uninstalling removes everything device-stored; for contact-form submissions, email privacy@findnaija360.com).
  • Withdraw consent for location, microphone, or other permissions at any time via your device’s app permissions settings.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data.

Children's privacy

Naija Finder products are not aimed at children under 13. We do not knowingly collect any data from children under 13. If a parent or guardian believes we have received data from a child under 13 by mistake, please contact us at privacy@findnaija360.com and we will delete it.

International data transfers

Our backend (Supabase) is hosted in the European Union. Map tiles (Mapbox) are served from a global CDN. When advertising is enabled, AdMob services may send data to Google servers around the world. All transfers comply with the relevant adequacy and contractual safeguards under Nigerian and EU data protection law.

Security

Connections to our backend, Mapbox, and any third-party SDK are encrypted in transit (HTTPS / WSS / TLS 1.2+). Trip-share IDs are random 16-character strings created on your device, where the platform supports a strong generator. The share link itself acts as the access key. It stops working once you end the trip, or after about 30 minutes of inactivity. This limits exposure if a link is leaked. Our admin systems require multi-factor authentication.

Changes to this policy

We may update this policy as Naija Finder grows. We will tell you about important changes through an in-app notice the first time you open the app after the update, plus a notice on this page. The “Last updated” date at the top shows the most recent revision.

Contact us

For questions about this policy or how we handle your data:

Email: privacy@findnaija360.com

General contact: findnaija360.com/contact

Medical disclaimer (Find Care users)

Find Care provides location-based hospital information for convenience only. It does not provide medical advice, diagnosis, or treatment. Always seek professional medical care when needed.

Hospital information shown in the app, such as phone numbers, addresses, and services, is provided for convenience and may be out of date. Always call ahead to confirm before you rely on any listed detail in an emergency.