Legal
Last updated October 2026
NicaDoc (this site, also shown as doctors-app) is run by Sidequest Labs, LLC. It is built for medical practices in Nicaragua, so it works within two Nicaraguan laws: Ley 787 on personal data, and Ley 423, the General Health Law. This page explains what each law asks, what NicaDoc does about it, and what stays the practice's job.
Who is responsible for what
The practice decides which patients it records and why, and it answers for its patients' records under both laws. NicaDoc keeps those records for the practice and uses them only to run the features the practice uses. We never decide on our own what happens to a patient's data.
Ley No. 787, Ley de Protección de Datos Personales (2012)
What the law asks
Personal data may only be collected with the person's consent and for a purpose they are told about. Health data is sensitive data and needs extra care. People have the right to see their data, correct it and ask for it to be deleted, and data sent outside the country has to stay protected.
What NicaDoc does
- Health data is treated as sensitive. Each practice's records are kept apart from every other practice, and only the staff the practice invites can open them.
- The data is used only to run the features the practice uses: the schedule, charts, messages, bills, files and lab results. We don't sell it, share it with advertisers, or use it to train AI.
- Every connection is encrypted (HTTPS). Passwords are stored in a form that can't be turned back into the password. Sign-in attempts are limited. Uploaded files are kept in private storage and open only through links that expire. Changes to a patient's details are logged with who made them and when.
- A patient who wants to see, correct or delete their data asks their practice. The practice can correct a record directly in NicaDoc. For a full copy or a deletion, the practice writes to [email protected] and we carry it out for them.
- NicaDoc's data is stored and processed outside Nicaragua. The providers involved are bound to confidentiality and handle data only to run the service: our hosting provider; WhatsApp (Meta), for the messages a practice sends and receives; an AI provider, only when a practice asks NicaDoc to read a lab report; and Stripe, for the practice's own subscription, which never includes patient records.
- If a security incident affects a practice's data, we tell the practice quickly and in plain words, so it can inform its patients.
What the practice does
- Ask patients for their consent before recording their data, and tell them what it is for.
- Record only what their care needs.
- Give access only to staff who need it, and remove people who leave the practice.
- Answer patients' requests to see, correct or delete their data within the time the law sets.
Ley No. 423, Ley General de Salud (2002)
What the law asks
It sets out patients' rights, including the confidentiality of their medical record, access to the information in it, and informed consent before treatment. Doctors and clinics must keep each patient's medical record (expediente clínico) complete, accurate and safe.
What NicaDoc does
- A patient's record is visible only to the staff of the practice treating them. Our team doesn't open patient records. If fixing a problem needs it, we ask the practice first and look only at what the problem needs.
- Changes to a patient's details are kept in the record's history, with the old value, the new value, who changed it and when.
- Records are kept. When a trial or subscription ends, the practice is paused, but its records stay as they were. We don't delete clinical records on our own.
- The practice can give patients their prescriptions and receipts as PDF documents, and send them forms through a private link.
- Practices can build consent forms in NicaDoc, send them to patients, and keep the answers with the patient's record.
What the practice does
- The doctor is responsible for what the record says and for professional secrecy.
- Keep records for as long as the Ministry of Health's rules require, and ask us for a full copy before closing the practice's account.
- Get informed consent as the law requires, on paper or with a NicaDoc form.
Breaking these laws breaks our Terms
Using NicaDoc in a way that breaks Ley 787 or Ley 423 is a violation of our Terms of Service, and we may pause or close the account.
Read section 6 of the TermsQuestions and requests
Write to [email protected]. A person answers. Sidequest Labs, LLC operates NicaDoc.
This page sums up two laws in plain words. It isn't legal advice, and it doesn't replace the full text of the laws or their regulations. If you're unsure what a law asks of your practice, check with a lawyer in Nicaragua.