top of page

Security FAQ

Where is SMYLS Data Stored?

SMYLS proudly stores all data is in Canada, on secure, best in class cloud infrastructure.

How is SMYLS Data Secured?

SMYLS Data is encrypted using 128-bit encryption when sent between your device and our servers, and stored with 256-bit encryption (in the same way as your banking information would be).

How is SMYLS Data Accessed?

Administrators, Doctors, Nurses, and staff each access SMYLS using their own account secured by a username and password, and may additional make use of the 2-Step Verification feature. Account Owners can control access permissions for each user.

How is SMYLS Data Backed-up?

SMYLS backs up customer data daily, to data servers independent of our application servers, in independent locations. All backup data is encrypted at rest.

Data Retention and Storage

SMYLS will store data for as long as the clinic holds an active subscription, and the clinic can choose when to delete data that is no longer needed. A cancelled subscription means that the account and any Subscriber Data associated with the account is no longer available for everyday use. Transactional and client data can be exported for your own independent backups.

Who owns SMYLS Data?

Personal information we collect from Account Owners and our customers to open and maintain their SMYLS account (i.e. clinic name, billing information, contact information) is handled in the ways laid out in our Privacy Notice.

Personal data that our customers collect about their clients (i.e. names, demographics, billing information, etc.) is fully owned by the customer. Essentially, SMYLS acts as an agent that stores data on behalf of our customers, but we don’t control or own that data. The Account Owner / Subscriber of a SMYLS account retains ownership of all patient data

Will my data be deleted if I cancel my SMYLS account?

If you cancel your SMYLS subscription, you will not have day-to-day access to your data, but your data will remain securely stored on our servers for a period of up to 2 years if you ever need to reactivate the account. At this time, SMYLS does not delete data after a subscription has been cancelled — however, we can’t commit to storing the data of a cancelled account forever. We highly recommend exporting your Data before cancelling your SMYLS account so you can keep a copy for your records.

Still Have Questions?

Have any questions about this guide or anything else related to security? Feel free to email Privacy and Security Support at privacy@smyls.ca and we’d love to clarify anything you’re unsure on!

bottom of page