Security

Authentication

MedPlaner uses Telegram's built-in authentication. There is no separate password — your Telegram account is your identity. The bot verifies your identity using Telegram's secure token system. No login forms, no password resets.

Bot Token Security

The MedPlaner bot token is stored securely on the server and rotated periodically. Access to the token is restricted to the production environment.

Data Isolation

Each user's medication data is isolated. Your plans, reminders, and logs are only accessible through your Telegram account. Caregiver access is granted explicitly by the patient and can be revoked at any time.

No Third-Party Analytics

MedPlaner does not use Google Analytics, Facebook Pixel, Mixpanel, or any third-party analytics. Server-side metrics (anonymous, aggregated) are used only for service reliability — not for tracking individual users.

No Advertising SDKs

MedPlaner contains no advertising, no tracking pixels, and no ad SDKs. The service is funded by Pro subscriptions (Telegram Stars), not by selling data.

Infrastructure Security

• Servers are hosted in the European Union.
• Access is restricted via SSH key authentication.
• Regular security updates are applied.
• Rate limiting prevents abuse.

Report a Security Issue

If you discover a security vulnerability, please email support@medpillreminder.com. We will respond within 48 hours.