Privacy Policy — MessageAssist

Effective date: July 13, 2026 Last updated: July 13, 2026

This Privacy Policy describes how the MessageAssist browser extension ("MessageAssist," "the extension," "we," "our") handles information. MessageAssist is published by Mariam Maniya Internal Medicine PC d/b/a Maniya Health Medical Group ("we," "us") and is available through the Chrome Web Store.

MessageAssist adds convenience features — "Reply All" buttons and user-defined quick-reply templates — to the secure messaging interface of the web-based electronic health record (EHR) system used by our organization (“the EHR application”).

The short version: MessageAssist does not collect, transmit, sell, or share any data. It makes no network requests of any kind. Everything it stores stays in your browser's extension storage.

1. Information We Do NOT Collect

MessageAssist has no servers, no analytics, no telemetry, and no network communication. Specifically, the extension does not:

• Read, store, copy, or transmit the content of any message you send or receive
• Access, collect, or transmit any patient information or protected health information (PHI) of any kind
• Collect names, email addresses, account credentials, or login information
• Track your browsing activity, on the EHR application or anywhere else
• Use cookies, pixels, fingerprinting, or any other tracking technology
• Send any data to us, to the EHR vendor, or to any third party
• Contain any advertising or advertising identifiers

The extension's code makes zero outbound network requests. You can verify this: the extension package contains no calls to fetch, XMLHttpRequest, or any remote endpoint, and its manifest requests no network-related permissions.

2. Information Stored Locally in Your Browser

To function, MessageAssist stores a small amount of data using Chrome's built-in extension storage (chrome.storage). This data is created by you or generated from your own use of the extension, and it never leaves Chrome's storage system:

Notes on this stored data:

• Chrome sync storage is a feature of the Chrome browser operated by Google. If you are signed into Chrome with sync enabled, Chrome may synchronize this data across your own devices under your Google account, subject to Google's privacy policy. We have no access to it at any point.
• The recipient search shortcuts may include the display names of colleagues within your organization as they appear in the EHR application's recipient picker. This information is stored only in your browser, is used only to speed up recipient lookup, and is never transmitted anywhere.
• No message content, patient names, or clinical information is ever written to storage.

3. Administrator-Managed Settings (Enterprise Deployments)

If your organization deploys MessageAssist through an enterprise policy (Chrome "managed storage"), your IT administrator may push a read-only configuration containing recipient name overrides — mappings from a staff member's display name to the search string that locates them. This configuration:

• Is created and controlled entirely by your organization's administrator
• Is read by the extension but never modified or transmitted by it
• Contains staff directory information only, never patient information

Questions about administrator-managed settings should be directed to your organization's IT department.

4. Browser Permissions and Why We Request Them

MessageAssist requests no other permissions. It cannot read your browsing history, access other tabs, or run on any website other than the single EHR application domain declared in its manifest.

5. Health Information and HIPAA

MessageAssist is a user-interface convenience tool. It does not access, create, receive, maintain, store, or transmit protected health information. Message content is typed by you directly into the EHR application's own interface; the extension only inserts your saved template text into the message field at your request and adds recipients you direct it to add. Because the extension processes no PHI and transmits no data, it does not act as a business associate under HIPAA. All handling of health information remains governed by the EHR vendor and your organization's own policies.

6. Data Sharing and Sale

We do not sell, rent, trade, or otherwise transfer any data to any party, because we never possess any data in the first place. There are no third-party service providers, processors, or partners involved in the operation of this extension.

7. Data Retention and Deletion

All extension data lives in your browser and is under your control:

• Edit or clear templates at any time from the extension's options page (click the extension icon).
• Remove all extension data by uninstalling the extension: right-click the MessageAssist icon in Chrome, choose "Remove from Chrome," and Chrome deletes the extension's local storage.
• Synced data (templates and search shortcuts stored in Chrome sync) can also be cleared through Chrome's sync controls in your Google account settings, or is removed when the extension is uninstalled from your synced browsers.

We retain nothing, because we receive nothing.

8. Security

Because MessageAssist transmits no data, the primary security consideration is the data at rest in your browser, which is protected by your operating system account and Chrome profile. The extension is distributed exclusively through the Chrome Web Store, which cryptographically verifies the package, and it loads no remote code — all logic ships inside the reviewed extension package and cannot be altered without a new store-reviewed release.

9. Children's Privacy

MessageAssist is a workplace tool intended for use by adult professionals within organizations that use the supported EHR application. It is not directed at children and, as described above, collects no information from anyone.

10. Changes to This Policy

If a future version of MessageAssist changes how data is handled, we will update this policy, revise the "Last updated" date above, and describe the change in the extension's Chrome Web Store listing before the new version is released. Because the extension currently collects nothing, any future change that introduced data collection would be prominently disclosed and would require your consent through updated Chrome permission prompts where applicable.

11. Contact Us

If you have questions about this Privacy Policy or the extension's data practices:

Mariam Maniya Internal Medicine PC d/b/a Maniya Health Medical Group 1078 White Horse Ave Hamilton NJ 08610 Email: help@maniyahealth.com Website: www.maniyahealth.com