Privacy & how we handle your information

Plain language, no lawyer fog. This page describes what this website collects — which is deliberately almost nothing.

Do not send us medical information through this website. The forms here accept an email address and nothing else. If you need to discuss a condition, medication or symptom, do it inside the clinical intake after you enroll, where the conversation is handled under HIPAA by the treating provider and pharmacy.

What this site collects

Your email address, if you choose to join the founding-member list.
Which plan you clicked and which prompt you came from, so we know what people want.
Your country, derived from the network request. We do not store your IP address — it is hashed and used only to stop the same machine submitting the form dozens of times.

What this site does not collect

No health conditions, medications, diagnoses or symptoms.
No advertising or analytics trackers, and no third-party cookies. There is no Meta pixel, no Google Analytics, and no session recording on this site.
No payment details. Nothing on this site takes a payment.

Where it goes

Submissions are stored in our own encrypted storage and used to tell you when enrollment opens. We do not sell or rent your email address. Ask us and we will delete your record.

How the page itself is protected

The site is served over HTTPS only, with a strict content security policy, framing disabled, and no cross-site referrer leakage. Scripts and styles are limited to this domain and our web font provider.

A family plan does not mean shared records

Once enrollment opens: paying for a household membership does not give you access to another adult's health information. A spouse cannot read a spouse's chart. The account holder sees billing and membership status for the household — not visits, diagnoses, messages or prescriptions belonging to another adult. Access to a minor's information follows the law of your state, which in some cases protects an adolescent's records from a parent. Your clinical record is held by the treating practice, which is the HIPAA covered entity for it — see your rights.

Marketing is kept separate from care

What you tell a clinician is used for your treatment, not to target you with advertising. We do not use clinical information to build marketing audiences and we do not sell it. HeydayMD LLC also operates Heyday, a men's health service; being a Tab member does not hand your clinical information to that service.

What Tab is, legally

Tab is a membership and prescription-discount program. It is not health insurance, it is not a substitute for insurance, and it is not a pharmacy. Care is delivered by independent licensed providers, and prescriptions are filled by participating pharmacies. $0 pricing applies to the medications on the covered list, at participating pharmacies, while the program remains in effect.

Contact

Questions about this page, or want your information removed? Email hello@tabprimary.com.

This site is pre-launch. This notice describes the website only; the clinical notice of privacy practices is provided by the treating provider at enrollment.