How We use your data?

Google Health data collected through the Eureka Research Platform is used only for the research studies in which you choose to participate and provide consent. Depending on the study and the permissions you grant, this may include data such as physical activity, sleep, nutrition, health measurements, and information about connected health devices. Researchers may use these data to understand health patterns, evaluate relationships between behaviors and health outcomes, and support the specific research objectives described in your study consent.

Privacy Policy

Google Health data will be collected and stored through the UCSF Eureka Research Platform using a HIPAA-compliant, cloud-based infrastructure. Your data is protected by secure firewalls and intrusion detection systems and is encrypted both in transit and at rest.

Eureka does not sell, rent, or lease Google user data, participant data, or identifying information. Identifiable information is not shared with other research studies without participant permission. Google user data is accessed and used only as necessary to provide study functionality and conduct the research for which you have provided consent.

For more information, please see our General Privacy Policy

Data Retention and Deletion Policy

Google user data collected through the study will be retained securely for as long as necessary to conduct and support the research study and to meet applicable research, legal, regulatory, and institutional record-retention requirements.

You may withdraw from the study at any time. Upon withdrawal, Eureka will stop collecting new data from your Google account and, where applicable, revoke or discontinue its access to your Google data.

You may also request deletion of Google user data previously collected by the study. We will honor deletion requests when permitted by applicable research, legal, regulatory, and institutional requirements. In some circumstances, data that have already been incorporated into research analyses, aggregated or de-identified datasets, publications, or records that must be retained may not be deleted.