What they may do · DPDP §6(4)
What Star Health and Allied Insurance does with your data
A health insurer that discloses your data, including health data, to network hospitals, third-party administrators, reinsurers and vendors, and sets its own retention periods. It does not claim ad profiling, cross-site tracking, AI training or biometrics.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Star Health and Allied Insurance’s own policy says “Where disclosure is necessary for the provision, administration, or servicing of insurance products and related services, including disclosure to network hospitals, third-party administrators, reinsurers, medical service providers, claims administrators, technology service providers, or other vendors and partners engaged by Star Health, strictly for purposes such as policy issuance, servicing, claims processing, verification, fraud prevention, customer support, or regulatory reporting.”
Our summary discloses personal data — which for a health insurer includes health and wellness information — to network hospitals, third-party administrators, reinsurers, medical service providers, claims administrators, technology service providers and other vendors and partners, as well as to law enforcement and regulatory authorities.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
Star Health and Allied Insurance’s own policy says “Star Health retains Personal Data only for as long as it is necessary to fulfil the purposes for which such data is collected and processed, and in accordance with applicable legal, regulatory, contractual, and operational requirements. Retention periods are determined by considering factors such as the lifecycle of insurance policies, statutory and regulatory record-keeping obligations, claims and underwriting requirements, fraud-prevention needs, dispute resolution, audits, and other lawful purposes permitted under applicable law, including directions or guidelines issued by the IRDAI.”
Our summary retention periods are determined by the company against open-ended factors including "operational requirements" and "other lawful purposes", with no period or end date stated to the individual. The deletion commitment that follows is itself subject to an open-ended carve-out for "other legitimate business purpose permitted under law", and anonymised data may be retained without limit.
What the policy does not mention
These are uses Star Health and Allied Insurance’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Builds an advertising profile of you
- Follows you onto other websites and apps
- Processes your face or other biometrics
- Trains AI models on your content
Star Health and Allied Insurance is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Star Health and Allied Insurance do with my personal data?
According to Star Health and Allied Insurance's own privacy policy, read on 2026-08-14, it discloses 2 of the six uses we track: shares your data with partners, keeps your records long-term.
Can I withdraw my consent from Star Health and Allied Insurance?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Every use above is one Star Health and Allied Insurance declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy