Sonoran Sleep App — Privacy Policy
Effective date: August 26, 2026
This policy covers the Sonoran Sleep app — the sleep diary our patients use between visits, at diary.sonoransleep.com and in the iPhone and Android apps. For how this website handles information, see our website Privacy Policy.
Who we are
The Sonoran Sleep app ("the app," "we," "us") is provided by Sonoran Sleep Center (Sarah Patel MD PC) to our own patients, as part of your sleep-medicine care.
This policy covers the Sonoran Sleep app specifically — what it collects, how it's used, and who can see it. It is separate from, and narrower than, the practice's Notice of Privacy Practices, which describes in more detail how Sonoran Sleep Center uses and discloses protected health information across all of its care, not just this app. Nothing here limits your rights under HIPAA or that notice.
Who this app is for
This app is not available to the general public — patients get access only by invitation from their Sonoran Sleep care team, as part of enrolling in a sleep-medicine treatment program. If you received an invitation you weren't expecting, please contact us using the information below instead of creating an account.
In short: no passwords, no ads, no tracking, no selling your data. Details below.
What we collect
- Account information: your name and email address, set by your care team when your account is created. We use your email to send you a secure one-time sign-in link — we never use or store a password.
- Sleep diary entries: what you log each day about your sleep — bedtime, wake time, time to fall asleep, awakenings and naps, and, depending on the specific program your provider has set up for you, a few additional check-in questions (for example, a sleep-quality rating, nightmares, or whether work or other duties disrupted your sleep). Not every patient's program asks the same questions.
- Optional lifestyle tags and notes: if your program tracks them, simple tags like caffeine or alcohol late in the day, sleep medication, or exercise — plus any free-text notes you choose to type in yourself.
- Your prescribed program: the sleep window and instructions your provider sets for you, so the app can show you your plan and let you know when it changes.
- Reminder preferences: if you turn on daily reminders, the time and time zone you chose, so we can prompt you at the right time.
- Basic account-security information: things like sign-in timestamps and basic technical/error logs, kept to keep the service reliable and your account secure.
We do not collect or ask for: passwords, payment information, precise location, your contacts, photos, or anything unrelated to your sleep-medicine care.
How we use it
Only to provide and support your care: showing you your own sleep diary, trends, and program; letting your care team review your entries and adjust your treatment; sending you sign-in links and any reminders you've turned on; and keeping the service secure and working correctly. We do not use your information for advertising, and we do not build a profile of you for any purpose beyond your own care.
Who can see it
Only your own care team at Sonoran Sleep — the clinicians and authorized staff involved in your treatment — can see your sleep diary and account information, following a minimum-necessary standard consistent with our HIPAA obligations.
You can see your own logged entries, trends, and your current prescribed program at any time in the app itself. Some parts of your full clinical record — for example, your care team's internal chart notes — are kept as part of your record but aren't shown directly in the app; contact us (below) for a copy of your complete record.
We do not sell your information, and we do not share it with anyone outside your own care relationship with Sonoran Sleep, except the infrastructure providers described below who help us run the app.
Advertising, analytics, and tracking
We don't show ads, sell your data to advertisers, or use third-party advertising or analytics/tracking tools in this app — no Google Analytics, no Meta/Facebook pixel, no ad-network SDKs, nothing that tracks you across other apps or websites. The only logging that happens is the basic security and reliability logging described above.
Security and where your information is stored
Your information is stored and processed on Google Cloud (the app's database, servers, sign-in system, and logging) and sent via Google Workspace (account and reminder emails) — both under Business Associate Agreements Sonoran Sleep has signed with Google, covering our handling of protected health information (PHI) as HIPAA requires. Data is encrypted both in transit and at rest. We don't use any other third-party vendor to process your health information.
This is HIPAA-protected health information
Your sleep diary and related information are part of your medical record and are protected under HIPAA and this practice's policies, in addition to the specific commitments in this policy. Our full Notice of Privacy Practices describes those rights in detail; a paper copy is available at our office on request.
How long we keep it
Your information is retained consistent with the practice's medical-record retention obligations under Arizona law. Under A.R.S. §12-2297, we keep the records of adult patients for at least six years after the last date you received care from us. For patients who were minors when they received care, we keep records until at least three years after the patient's eighteenth birthday, or six years after the last date of care — whichever is later.
We may keep information longer where a law, a legal hold, or an unresolved dispute requires it.
Your choices and rights
You can ask us to let you see, correct, or delete your information at any time — contact us using the information below. You can also turn reminders on or off yourself, at any time, inside the app.
Account deletion
Because your sleep diary is part of your clinical record, Sonoran Sleep does not offer an automatic, self-service "delete my account" button inside the app — the same way a clinic couldn't let a patient shred a paper chart without any review. Instead: to delete your account or your data, contact your care team, or email ssctechnology@sonoransleep.com, or call (602) 206-6262. We'll confirm your identity, then handle your request the way we would any other request to amend or remove part of a medical record, consistent with the recordkeeping obligations described under "How long we keep it" above.
If you're in a state with additional privacy rights (for example, California), those rights still apply — contact us and we'll explain how they work alongside a HIPAA-covered clinical record.
Children's privacy
Sonoran Sleep treats patients across a range of ages, and some patients are minors. A minor never creates their own account — every account is created by our staff, as part of enrolling a patient (or, for a minor, their parent or guardian) in a treatment program; there is no open self-registration. For a minor patient, their parent or guardian is our point of contact for anything in this policy.
Changes to this policy
If we make a material change to this policy, we'll update the effective date above and, where required, notify you directly — for example, by email.
Recognizing official email from us
Emails about your account and reminders come from noreply@sonoransleep.com. We will never ask you for a password by email — we don't use passwords at all — so if anything asks you for one, it isn't really from us.
Contact us
Questions about this policy, or a request about your information (including deleting your account — see "Account deletion" above):
Email: ssctechnology@sonoransleep.com
Phone: (602) 206-6262
Mail: Sonoran Sleep Center (Sarah Patel MD PC), 5620 West Thunderbird Rd, Suite B3, Glendale, AZ 85306