Legal
Privacy policy
Last updated · 2026-05-17
This Privacy Policy explains how Naija Finder (“we”, “us”, “our”) and our products collect, use, and protect your information. This starts with Find Care. By using any Naija Finder product, you agree to the practices described below.
Naija Finder is incorporated and operated in Nigeria. We comply with the Nigeria Data Protection Act 2023 and the framework that came before it, the Nigeria Data Protection Regulation 2019. Where we serve users outside Nigeria, equivalent regional protections apply.
Who we are
Naija Finder is the operating company behind our products. These include Find Care (live now) and other apps or sites we may release from time to time. This Privacy Policy describes how we handle privacy overall. A specific product may show extra notices when you use sensitive features, such as trip sharing or voice input. We are not a medical advice service, a financial advisor, or a property lawyer. We are a directory and discovery tool. Always seek qualified professional services where you need them.
Accounts later. Find Care today does not require sign-up. We may add optional or required sign-in on some products. Section 2 describes anonymous use today and what we may collect if you sign up, such as your name, mobile number, email, or device information. We will always update this policy and our in-app or store disclosures when that happens.
Contact for privacy matters: privacy@findnaija360.com.
Anonymous-by-design — what this actually means
For Find Care and our other consumer products today, we do not require sign-up or login to use core discovery features. By design, we do not ask for your name, phone number, email, or government ID in the app for those features. The main exception is when you choose to contact us through the contact form (see below). That form collects what you type so we can reply.
Later products and accounts. If we add accounts or sign-in on a product, we may collect personal information you provide or that the product needs. For example your name, email address, mobile phone number, business or host details, and device or technical information such as device model, OS version, or app build. We use this for security, support, fraud prevention, or service delivery. We will tell you exactly what we ask for at sign-up or in the product. We will update this Privacy Policy and only use that data for the purposes we describe there.
What we DO use (anonymous-first mode and optional features):
2.1 Anonymous device identifiers + usage reporting
localStorage on web, and Capacitor preferences on mobile. It changes automatically every 365 days. We use it only to count unique devices for usage analytics and to avoid counting the same event twice. In that mode it is not linked to your name, email, phone, or any account or external identifier we hold about you. This is because we do not collect those things for core app use, unless you use the contact form or, in the future, sign up for an account.Reporting data (anonymous mode). We also store anonymous usage events in our backend (see Supabase below) so we can run the product and understand overall patterns. For example: searches, hospital detail views, in-app navigation starts, phone or WhatsApp taps on a listing, state selection, session starts, optional app-install signals, and non-personal ad-slot impressions or clicks when advertising is enabled. While you use the app without an account, each row is tied only to the rotating anonymous id and small technical fields, such as which Nigerian state the session was using. We do not attach your real-world identity to those events. Our internal reporting is built from counts and trends, not from following individual users. If we later tie usage to a signed-in account, we will describe that in an updated policy and at sign-up.
2.2 Location data (Find Care and other map-based products)
2.3 Device-stored preferences
2.4 Trip-share data (Find Care — optional, opt-in)
2.5 Microphone (Find Care — optional, opt-in)
2.6 Shared location links and shared content
- Pasted Maps links. When you paste a map link, Find Care turns it into coordinates. If it is a shortened link, the link is sent to a Naija Finder server endpoint that follows the redirect and reads the place name. That place name is then geocoded into coordinates by Mapbox (see section 3.1). The link is processed only to work out the location.
- Content shared from other apps. When you use your phone’s share sheet to send a location into Find Care, the shared text is read only to find a location in it. The raw shared text is then discarded.
We do not store the links you paste, the text shared into the app, or the resolved coordinates on our servers as a history. An active shared location is kept only on your device for the current session (see section 2.3) so the feature still works after a refresh. It is cleared when you exit it or fully close the app.
2.7 Contact form submissions
2.8 What we do NOT collect
Third-party services
Naija Finder products use the following third-party services. Each has its own privacy policy that covers the data it receives.
3.1 Mapbox (maps, directions, and geocoding)
3.2 Supabase (real-time + database)
3.3 Capacitor (mobile-app shell)
3.4 Advertising (when enabled)
npa=1). The AdMob SDK still receives the same coarse device and IP signal it always does for any ad request. We never link this to any other identifier.How we use your information
We use the information described in section 2 for the purposes below:
- Operating the product you’re using — finding hospitals near you, drawing a route, etc.
- Aggregate, anonymous usage analytics — how many devices opened the app this month, how many searches were run, which states are most active. We do not profile individual users.
- Running trusted service providers — where needed, sharing relevant data with third-party processors that help us run core app features. For example maps, infrastructure, messaging, support tools, security, fraud prevention, payments, or account services if introduced later. We require those providers to process data only for agreed purposes, under contractual and legal safeguards.
- Legal, safety, and compliance uses — preventing abuse, enforcing our terms, handling lawful requests, and meeting obligations under applicable law.
We do not sell your information. We share data only with the service providers that help us run the app, listed in section 3, and only so those features can work. We may also disclose data where the law requires it, or to protect users and the service. If advertising is ever enabled, any partner data use stays within what this policy and section 3 describe.
Data retention
- Location data: never stored on our servers. Held only in device memory while the app is open.
- Trip-share data: ends when you arrive or end the trip, and auto-expires after about 30 minutes of inactivity.
- Anonymous analytics events: may be kept for a long period. This supports long-term reporting, product planning, fraud or abuse analysis, and legal or audit needs. We keep raw and derived analytics data for as long as is reasonably necessary for these purposes. We may keep fully aggregated or de-identified trend datasets for longer.
- Device-stored preferences + saved items: stay on your device until you uninstall the app or clear its storage.
- Contact form submissions: retained for as long as your inquiry is open + 12 months for legal / audit purposes, then deleted.
Your rights under Nigerian law
Under the Nigeria Data Protection Act 2023 you have the right to:
- Access any personal data we hold about you. Today, that is mainly your contact-form submissions (see section 2.7). If we introduce accounts, this will also include account and profile data tied to you, as described when you sign up.
- Request correction of any inaccurate personal data.
- Request deletion of your data (uninstalling removes everything device-stored; for contact-form submissions, email privacy@findnaija360.com).
- Withdraw consent for location, microphone, or other permissions at any time via your device’s app permissions settings.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data.
Children's privacy
Naija Finder products are not aimed at children under 13. We do not knowingly collect any data from children under 13. If a parent or guardian believes we have received data from a child under 13 by mistake, please contact us at privacy@findnaija360.com and we will delete it.
International data transfers
Our backend (Supabase) is hosted in the European Union. Map tiles (Mapbox) are served from a global CDN. When advertising is enabled, AdMob services may send data to Google servers around the world. All transfers comply with the relevant adequacy and contractual safeguards under Nigerian and EU data protection law.
Security
Connections to our backend, Mapbox, and any third-party SDK are encrypted in transit (HTTPS / WSS / TLS 1.2+). Trip-share IDs are random 16-character strings created on your device, where the platform supports a strong generator. The share link itself acts as the access key. It stops working once you end the trip, or after about 30 minutes of inactivity. This limits exposure if a link is leaked. Our admin systems require multi-factor authentication.
Changes to this policy
We may update this policy as Naija Finder grows. We will tell you about important changes through an in-app notice the first time you open the app after the update, plus a notice on this page. The “Last updated” date at the top shows the most recent revision.
Contact us
For questions about this policy or how we handle your data:
Email: privacy@findnaija360.com
General contact: findnaija360.com/contact
Medical disclaimer (Find Care users)
Find Care provides location-based hospital information for convenience only. It does not provide medical advice, diagnosis, or treatment. Always seek professional medical care when needed.
Hospital information shown in the app, such as phone numbers, addresses, and services, is provided for convenience and may be out of date. Always call ahead to confirm before you rely on any listed detail in an emergency.