Account Security

How do I set up two-factor authentication (MFA)?

Go to Profile → Additional Security → Add MFA. You can choose between two methods: • Phone (SMS or call): Enter your 10-digit US phone number, choose SMS or cal...

How long does the MFA verification code last?

MFA codes expire after 5 minutes. If your code expires before you enter it, request a new one.

I entered my verification code but it says it doesn't match. What should I do?

Make sure you're entering the most recent code. Codes expire in 5 minutes, so if it has been a while, request a new code and try again immediately.

Can I use an authenticator app instead of receiving codes by text?

Yes. During MFA setup, choose the Authenticator App option. Scan the displayed QR code with Google Authenticator, Authy, or another TOTP app, then enter the 6-d...

What phone number formats are accepted for MFA?

Enter your US phone number as 10 digits with no spaces, dashes, or special characters (e.g., 4045551234). International numbers are not currently supported for...

How is my health data protected?

AskMD is HIPAA-compliant. Your health information is encrypted at rest using MongoDB client-side field-level encryption (CSFLE), and all data in transit is encr...

Who can see my health information?

Only you can see your health information. AskMD does not sell or share your personal health data with third parties without your explicit consent.

What happens to my data if I delete my account?

You can request full account deletion, which removes all your personal data from AskMD's systems. You can also choose selective deletion — removing only your he...

How do I delete my account or specific data?

Go to Profile → Settings → Delete Account/Data. You'll see options to delete your full account or to remove specific data types (health records, insurance info,...

Is my CLEAR biometric data stored by AskMD?

No. Biometric data processed during CLEAR verification is managed by CLEAR, not AskMD. AskMD only receives a confirmation that your identity has been verified.

I received a "Token has expired" message. What should I do?

Your session has timed out. Sign in again to continue. This is a normal security measure to protect your account.

Can I have multiple users on one account?

No. AskMD accounts are individual. Each person should create their own account to keep health data separate and accurate.

I see "Additional permissions are required to continue." What does this mean?

When signing in with Google or Apple, you may need to grant certain permissions for AskMD to access your basic account information. Try signing in again and acc...