Is Nabla safe with your data?
Nabla
Weak disclosure · high confidence
Nabla earns a D (46/100) because it leaves much about its data practices unstated.
Dealbreaker flag
- D1.1: NABLA is free to use the Data in the context of its activities, in particular with a view to contributing to the research and development of the Solution, to the improvement of its performance, of the models and algorithms developed and trained by NABLA
- D1.4: the CLIENT acknowledges and accepts that NABLA is and remains the sole owner of all intellectual property rights relating to the models and algorithms of the Solution, including in connection with the use of the Data generated by the CLIENT
#108
of 216 apps ranked
46
score · Healthcare avg 34
+12
vs category average
Nabla's terms let it use client data to train and improve its models with no opt-out, keep all rights in the resulting models, and state no retention period, while its HIPAA business-associate addendum does commit to a seven-day breach notice, a SOC 2 report on request and a named privacy contact.
What Nabla's privacy policy and terms of service say about your data
Trains on your data
The terms state Nabla is free to use client data during the contract and after it ends to research, develop and improve its models and algorithms, and separately that de-identified data may be used to train its internal AI model. No opt-out is offered.
Nabla keeps the model rights
The client acknowledges Nabla is and remains the sole owner of all intellectual property rights in the models and algorithms, including in connection with the use of data the client generated.
No retention period
The policy keeps personal data for as long as it says it needs it, naming no number of days, months or years, and no shorter clock for AI logs or transcripts.
Strong clinical and breach terms
Human review is required for all outputs, breaches of unsecured PHI must be notified in writing within seven calendar days, and a SOC 2 report plus a dpo@nabla.com contact are available.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Nabla privacy rating
Details
- Category
- Healthcare
- Modalities
- text, audio
- Processes biometrics
- No
- Policy last updated
- 2026-06-22
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other healthcare apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.