Privacy Policy
Last updated 27 August 2026
This policy explains what Evident Labs collects, why, and what choices you have. We have tried to write it in plain language.
The short version: we collect what we need to give you CME and track your requirements. Your clinical judgment may be used to evaluate and improve medical AI, in de-identified and aggregated form, and you control that.
Who we are
Evident Labs provides continuing medical education to licensed clinicians and produces clinical evaluation data for organisations building medical AI. When you use our service, Evident Labs is the controller of your personal information.
What we collect
We collect the following:
- Account information — your name, email address, and password.
- Professional information — your credential type, licence number, state of licensure, specialty and subspecialty, board status, and years in practice. We use this to verify you are a clinician and to match you to relevant activities.
- Activity records — the activities you complete, your responses, your stated confidence, your written reasoning, and the CME credit associated with them.
- Requirement information — the state and board requirements you tell us apply to you, and your progress against them.
- Technical information — device, browser, IP address, and how you use the service.
What we do not collect
Evident Labs is not a clinical system. Our activities are educational and use constructed or de-identified cases. We do not ask for, and you should not submit, protected health information about your own patients. If you include patient-identifying information in a free-text response, we will remove it.
How we use your information
We use your information to:
- Deliver activities and record CME credit for eligible accredited activities.
- Verify your credentials and match activities to your specialty and clinical relevance.
- Track your progress against the requirements you have told us apply to you.
- Show you how your responses compare with peers, specialists, and the evidence.
- Operate, secure, and improve the service.
- Contact you about your account, your requirements, and new activities.
Clinical judgment and medical AI
This is the part that makes Evident Labs different, so we want to be direct about it.
Evident Labs produces datasets that organisations use to evaluate and improve medical AI. Those datasets are built from clinician responses to activities — the ratings, reasoning, and confidence you provide.
When your responses are used this way, they are de-identified and aggregated. Your name, email, licence number, and contact details are never included. What is shared is the clinical judgment itself alongside non-identifying professional context, such as 'orthopaedic surgeon, 10+ years in practice'.
You can see and change how your responses are used in your account settings. If you opt out, you can still complete activities and earn CME. Our Data & consent page explains this in plain language.
We do not sell your personal information.
When we share information
We share personal information only in these circumstances:
- Service providers — hosting, email, analytics, and payment providers who process data on our instructions.
- Accreditation partners — where an activity is accredited, we share what is required to issue and record credit.
- AI evaluation partners — de-identified, aggregated clinical judgment as described above, subject to your settings.
- Legal — where we are required by law, or to protect the rights and safety of people using the service.
- Business transfer — if Evident Labs is acquired, information may transfer as part of that transaction, subject to this policy.
Your choices
You can:
- Access, correct, or export the information we hold about you.
- Delete your account and associated personal information.
- Change whether your responses contribute to medical AI evaluation.
- Opt out of non-essential email.
Retention
We keep your account and CME records for as long as your account is active, and afterwards for as long as accreditation and record-keeping obligations require. De-identified activity data that can no longer be linked to you may be retained indefinitely.
Security
We use encryption in transit and at rest, access controls, and regular review of our systems. No service can promise perfect security, and we will not pretend otherwise. If a breach affects your information, we will tell you.
Where your information is held
Evident Labs operates in the United States and your information is processed there. If you use the service from elsewhere, you are transferring information to the United States.
Children
The service is for licensed clinicians and is not directed at anyone under 18.
Changes
If we make a material change to this policy, we will tell you before it takes effect. The date at the top shows the most recent revision.
Contact
Questions about this document? Email hello@evidentlabs.ai.