This page explains how to ask us to delete your data, and what we can and cannot delete. It accompanies section 15 of our Privacy Policy.
Delete your account in the app
The quickest way is in the mySihat app: open Settings → Delete account, confirm with your password, and your app account is closed straight away. You can do the same on the web: sign in at https://mysihat.app and open My Profile → Delete account. Everything listed under What we will delete below is removed at that moment, and you are signed out on that device.
To use the app again afterwards, ask your clinic to set up your access, or — if you have never been treated at a clinic on mySihat — simply register again.
Delete some data and keep your account
You do not have to close your account to remove data from it. In the app you can remove your profile picture, delete notifications, remove family links, and clear optional details such as your phone number, address, race and lifestyle answers. To have any other data you gave us deleted, email us as described below.
Or make a request by email
If you no longer have the app, email dev@mysihat.digital from the email address on your account, with the subject Data deletion request. Tell us:
- Your full name as registered with your clinic.
- The mobile number on your mySihat account.
- Whether you want your app account closed, only specific data deleted while you keep your account, your medical records addressed, or a combination.
Please do not include your IC number, medical details or any other sensitive information in the email. We will verify your identity separately before acting.
What we will delete
mySihat is the controller of the data that exists because you use the app. On request we will close your app account and delete:
- Your sign-in credentials and app account.
- Your notification token, so the app can no longer reach your device.
- Your profile picture.
- Your app preferences, such as language and theme.
- The family links you created, and your side of links others created to you.
What we cannot delete
Your medical records belong to the clinic that treated you, not to mySihat. The clinic is their controller, and is separately required to retain them: under the Private Healthcare Facilities and Services Act 1998 and applicable guidance, medical records are generally kept for at least 7 years from the last entry, and longer for minors (see section 9 of the Privacy Policy). This covers your visit history, medical certificates, lab results and invoices. We hold those records on the clinic's behalf and can only act on the clinic's instruction.
If you want your medical records addressed, contact the clinic that treated you directly. We will help you reach them if you are not sure who to write to.
Closing your app account does not delete your medical records, and does not affect your care. You can continue to be treated at the clinic exactly as before; you simply lose the app as a way of viewing your records.
If you have never been treated at a clinic on mySihat — for example, you registered in the app but never visited — there is no clinic record to keep, and your patient profile is deleted along with your account.
How long it takes
Deleting your account in the app takes effect immediately. For an email request, we will confirm your identity, act on the request, and reply within 21 days, as required by the Personal Data Protection Act 2010. Our reply will say what was deleted, and what had to be retained and why.
If you are not satisfied
You may contact the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi) at https://www.pdp.gov.my.