Abundant Privacy

Introduction

We're Abundant Science, and this is our plain-language Abundant Privacy manifesto. We are a proudly Canadian company (Toronto-based) operating under the laws of Canada and Ontario. We do not sell, broker, or share data you provide us. We respect your body and your health, which means that we take security and privacy seriously by design. Abundant Science is building rapid testing as a category in Canada and worldwide. Any and all actions we take with data you provide us serve that purpose. Your data are protected by Canadian and Ontarian law, and by the choices we have made to prevent future catastrophe.

We've studied Canada's healthcare privacy failures so you don't have to relive them. In 2019, LifeLabs—Canada's largest lab testing company—opened 15 million Canadians' health data to hackers for nearly a year before they noticed. That's 1 in 2.5 Canadians nationwide, but it's worse: LifeLabs primarily operates in Ontario, British Columbia, and Saskatchewan, with a combined population of 20.8 million in 2019. This means the breach affected over 70% of residents in these provinces—nearly 3 out of 4 people. They had just 4 security staff for 5,700 employees, no written security policies, and stored passwords in plaintext. That's not us. We build security in from day one, not after a harmful breach.

1. For Any & Every Body

We will:

• Collect only your email and test interests at this stage
• Use industry-standard security to protect your information
• Allow you to update preferences or delete your information anytime
• Notify you promptly of any data-related incidents

We won't:

• Sell your personal information to third parties
• Share your health interests with advertisers
• Retain your information longer than necessary
• Use your information for purposes other than described

2. For Healthcare Providers & Researchers

We will:

• Share anonymized, aggregated data to improve healthcare access
• Consider partnerships that advance public health with appropriate safeguards
• Maintain strict separation between identifiable and research data

We won't:

• Share your identifiable information without your explicit consent
• Allow researchers to contact you directly unless you opt in
• Include your identifiable information in any research

3. For Regulators & Diagnostics Producers

We will:

• Comply with Ontario's Personal Health Information Protection Act (PHIPA)
• Adhere to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
• Follow relevant provincial health information legislation as we expand
• Maintain appropriate records as required by health authorities
• Adapt our practices as regulations evolve
• Implement safeguards that exceed minimum requirements

We won't:

• Share personally identifiable information except where legally mandated
• Allow diagnostic companies to access your information without consent
• Transfer your data internationally without ensuring equivalent protections

4. For Customers & Application Users

We will:

• Be transparent about how our data practices evolve
• Give you meaningful control over your information
• Honor your communication preferences
• Provide clear instructions for accessing, exporting, or deleting data

We won't:

• Use dark patterns to obtain consent
• Track your location or device beyond what's necessary
• Retain your information after you've deleted your account

Contact Us

If you have questions about your privacy or this policy:

Email: privacy@abundant.science

Last Updated: June 16, 2025 – Email address updated, policy unchanged since May 6, 2025 initial version