Patient consent
You enable donation for one specific disease.
Donate for research on YOUR disease. Not everything. Just what helps. And you can withdraw at any time.
Virtuous, transparent, opt-in loop. Your data improves the models that serve you.
You enable donation for one specific disease.
Pseudonymized cohort made available to researchers.
Study results flow back into the research lake.
CamemBERT-bio + Mistral fine-tuned to better serve you.
More precise suggestions for YOUR specific disease.
↻ Patient → Research → Better AI → Patient.
You enable research for one specific disease (diabetes, hypertension, breast cancer, etc.) — not your full record.
Your data is k-anonymized (k=5 minimum) before entering the research lake. No re-identification possible.
Researchers can query the cohort without ever seeing your identity. Audit-log on every access.
1 tap removes your data from the lake within 24h. No justification required. No penalty.
| Consent | Transparency | Hosting | Value returned | |
|---|---|---|---|---|
| GAFAM (Apple Health, Google Fit) | All or nothing | Opaque | Hosted US · Cloud Act | No patient feedback |
| State platforms (Mon Espace Santé) | Centralized | Limited | Hosted FR | No patient feedback |
| My Data My Care | Disease-by-disease opt-in | Transparent · audit-log | FR / EU · HDS v2 | Patient royalties on pharma studies |
If a pharma study uses your pseudonymized data, you receive a share of the royalties.
Target: 5 to 15% of the study contract redistributed to contributors, prorated to their actual contribution.
No upsell. No premium pricing. No pressure. Just your value, recognized.
Royalties paid published annually. Independent audit firm. Auditable ledger.
End-to-end encryption on the patient side. Keys held by the patient (HKDF). MDMC CANNOT read your raw data.
Lake hosted HDS v2, VPC isolated from the rest of the infra, researcher access via audited API. K-anonymous pseudonymization + direct identifier suppression (FFI L.1110-4).
Models trained directly at partner hospitals without PHI ever leaving. Only gradients (model parameters) circulate — not the data.
See how each technical layer protects your privacy while feeding the progress loop.