Privacy policy

Last updated: 2026-10-15

FindADoctor.si runs read-only doctor directories that AI agents (such as Claude or ChatGPT) can search on a person’s behalf, one per country:

• United States: the HTTP API at https://api.findadoctor.si/api/v1/;
• New Zealand: the HTTP API at https://api-nz.findadoctor.si/api/v1/ and a New Zealand-only MCP address https://api-nz.findadoctor.si/mcp;
• One MCP address for every country: https://api.findadoctor.si/mcp. It passes each request on to the service for the country asked for (or the country in the doctor id) and keeps nothing itself: no search terms and no network addresses. Its log records only the time, the response status, the type of request, the directory function used, the country and how long it took, for 14 days.

No sign-up. Short lists are free; full evidence has a daily allowance. This policy covers both and explains what happens to the information an agent sends us. Each country’s service keeps its own accounts, limits and counts, in the same way. It is operated by Phoenix Tree under its Phoenix Tree AI brand.

What we receive

A search can include a medical condition or procedure, a specialty, a place (a US city, state or ZIP code, or a New Zealand city, suburb or region), a doctor’s name, and preferences such as language or whether the doctor sees children. We do not ask for, and an agent should not send, a person’s name, date of birth, insurance member ID or anything else that identifies them.

Our server also sees the network address a request comes from, as every web server does. Requests that come through ChatGPT may also carry an anonymous user identifier that ChatGPT provides to services for rate limiting; it does not tell us who the person is.

Accounts. For each account we keep a random account number, a short label we use to recognise it (for example the name or email address given when access was requested), the date it was created and its daily limits. For each account key we keep a label naming the agent it is for, when it was created, when it expires and the date it was last used. Access codes and account keys are kept only in one-way hashed form, so we cannot read them back.

Sign-in records. When an AI app connects, we keep the app’s name and the address it asked us to send the person back to. After sign-in we issue the app access keys, kept only in one-way hashed form with the account and app they belong to, the permission granted (read-only search) and when they expire.

What we do with it

• Search terms are used only to answer that request. They are processed in memory and are not written to disk, logged or kept after the answer is sent.

• Network addresses are not kept, except as described for the error log below. To share the service fairly, the server keeps some information in memory only, never on disk:

  • per network address (IPv6 addresses grouped by /56), per ChatGPT user identifier (one-way hashed with a random value that changes every time the server restarts) and per account: the number of requests, the time spent searching, and which doctors’ records were opened today, so that opening the same doctor again the same day is not counted twice. The list of doctors opened is cleared at 00:00 UTC every day;
  • per network address: open sign-in pages and wrong access codes.

  The server forgets a network address, user identifier or account 24 hours after its last request (15 minutes for wrong access codes; an open sign-in page expires after 10 minutes), and everything in memory is lost when the server restarts.

• Daily totals. For each account we write to disk, per day, the number of requests, the number of different doctors opened and whether the daily limit was reached, and keep these for 90 days. For the service as a whole we write, per day and per kind of connection (for example “account”, “claude”, “chatgpt” or “without an account”), the number of searches, detail requests and doctors opened. These totals contain no network address, user identifier or search terms, and are kept for up to 400 days to plan capacity and pricing.

• Operational log. For each request we record the time, the response status, the type of request, the directory function used (for example search_doctors), how long it took and the kind of connection, with a short code made by one-way hashing the network address with a random value that changes every time the server restarts, and, for a signed-in account, the first characters of the account number and which key was used (the key’s own number, or that the sign-in was by browser). Because the random value changes, the code cannot be matched to the address later, but it can link requests made between two restarts. The log never contains search terms. It is kept for 14 days.

• Web server error log. Our web server records only serious errors. In rare cases an entry can include the network address of the connection that caused it (for example a broken encrypted connection). That log is deleted after 14 days.

• How long sign-in records are kept. Sign-in access keys last one hour; renewal keys last up to 30 days (180 days at most from sign-in). Expired keys are deleted within a day of expiry. Account keys for AI agents last 90 days unless agreed otherwise (at most one year); a cancelled key stops working at once, and account keys are deleted 30 days after they expire. App records unused for 90 days are deleted. An account is kept until its holder asks us to delete it or we close the service; email contact@findadoctor.si and we will delete it, with all its keys and daily totals, within 14 days of confirming the request. You can also ask us to sign out all your apps or cancel a key at any time.

• This website has no cookies, advertising, analytics or tracking, and loads nothing from other sites.

• We do not sell or rent any information, and we do not use requests to train AI models. We share it only with the providers that run the service (below), or when the law requires it.

Two providers run the service for us: Cloudflare serves these pages and carries requests to our server, and processes network addresses to deliver and protect the service under its own privacy policy; Alibaba Cloud hosts our server in the United States. Email sent to contact@findadoctor.si is forwarded by Cloudflare to the inbox we read, and kept there as long as needed to answer it.

Where the doctor information comes from

The directories are built from public sources.

United States:

• NPPES NPI registry (September 2026)
• CMS Doctors and Clinicians national file (2026)
• Medicare Physician & Other Practitioners 2024 (by provider; by provider and service)
• Medicare Part D Prescribers 2024
• CMS Open Payments 2024-2025
• CMS Provider Data Catalog (facility affiliations, hospital ratings, MIPS 2024)
• OIG LEIE exclusion list (2026-09-10)
• CMS Medicare Opt Out Affidavits (August 2026 file, published 2026-09-21)
• NLM MeSH 2026
• NUCC Health Care Provider Taxonomy 26.1
• U.S. Census Bureau 2026 Gazetteer, ZIP Code Tabulation Areas (distance search)
• Hospital systems' own 'find a doctor' websites (facts on doctor profile pages, read from 2026-10-08)

New Zealand:

• Healthpoint (healthpoint.co.nz): doctor listings, service pages and general practice pages
• Medical Council of New Zealand: public register of doctors (registration and specialist-scope dates)
• New Zealand honours lists, as reproduced on Wikipedia
• University of Auckland public staff profiles (academic title and appointments)
• Europe PMC: count of papers with a New Zealand affiliation
• Health New Zealand | Te Whatu Ora: waiting list data (CC BY 4.0)
• Private hospital websites (used to match searches; only links to the doctor's page are shown)

Each result says where its information came from and when it was collected. No private doctor rating, award or hospital ranking is included or counted in scores. Specialties come from each physician's NPI taxonomy code and CMS specialty, matched to the specialty names used here by their official names. The hospital and children's hospital websites we read were chosen partly from published lists. In New Zealand, results are ranked by how directly the doctor’s own listing matches the need, and no ratings, reviews or rankings are used.

Doctors: if information about you is wrong, or you want it removed, see Corrections and removal for the United States or New Zealand.

Medical disclaimer

The directory helps find and compare doctors. It is not medical advice and does not rate the quality of care. Always confirm insurance, availability and other details with the doctor’s office. In an emergency, call 911 in the United States or 111 in New Zealand.

Children

The service is not directed at children under 13 and does not knowingly collect information from them.

Where the service runs

The server that answers searches, for both countries, is in the United States. Searches about New Zealand doctors are processed there too.

Changes and contact

If we change this policy we will update the date above and note it in the changelog. Questions: contact@findadoctor.si.