Vanya does not store or manage any PHI or PII data. It works in the same way as API clients such as Postman and Insomnia, making GET requests to a FHIR server and displaying the returned results for viewing inside the app. It does not save any of the FHIR server responses to local storage and it does not send any of this data to other services, either locally or in the cloud.

Vanya Labs servers never have access to your FHIR server details or data.

What data does Vanya save?

1. Server connection details
FHIR server URLs and any server connection details that the user enters are saved to an encrypted file stored locally. This may include client IDs and client secrets, API keys and request header values. This data is only ever sent to your FHIR server. It is not sent or made available to any server at Vanya Labs. This is the file location:

- Windows: “\AppData\Roaming\Vanya Client\fhirServers.dat”

- Mac: “/Library/Applications Support/Vanya Client/fhirServers.dat”

Inside the “Vanya Client” folder, 10 days of backups of this file are stored in a “backups” folder.

2. Saved queries
When the user saves a query, details of that query are saved locally to a JSON file in the “Vanya Client/Queries” folder. This file is not encrypted and does not contain server connection details. Only the query string itself is saved. Vanya never saves the results of running a search query. This is the file location:

- Windows: “\AppData\Roaming\Vanya Client\Queries\savedQueries.json”

- Mac: “/Library/Applications Support/Vanya Client/Queries/savedQueries.json”

Inside the “Vanya Client” folder, 10 days of backups of this file are stored in a “backups” folder.

3. Log file
Vanya writes to a local log file periodically. This file contains details of any errors that occur in the app and details of successfully carried out actions. It does not contain any data retrieved from a FHIR server or any FHIR server connection details. The file is overwritten every few days. It never leaves the local machine unless the user sends a copy to Vanya Support to help with debugging. This is the file location:

- Windows: “\AppData\Roaming\Vanya Client\log.txt”

- Mac: “/Library/Applications Support/Vanya Client/log.txt”

Does Vanya “Call Home”?

Yes. A call is made to a Vanya Labs server once a day to notify the server that the app is in use. No PII or PHI data is sent to the server. The server has no way to connect this call to an individual user or company. The reason for the call home is so we know how many people are using Vanya, which version they are using and to get an idea of where in the world the app is being used. This request data is not encrypted and can be viewed using common developer tools such as Fiddler.

The following information is sent:

- The version of the app that is being used
- The timezone on the user’s machine
- Whether the call is made from a Windows or a Mac