App: Medly — Pill Reminder & Tracker (com.umeshghimire.medly)
Publisher: Umesh Ghimire
Last updated: 18 August 2026
Medly handles health information, which deserves a policy written plainly rather than defensively. This describes what the app actually does, checked against the source code rather than against intentions.
All of this is held on your device, and a copy is also kept in your account — see section 3:
Uninstalling the app deletes the copy on your phone. If you have not deleted your account, the backup copy remains until you do.
When you type a medication name while adding or viewing a medication, that text is sent to:
clinicaltables.nlm.nih.gov — the US National Library of Medicine, to
suggest spellings and strengthsapi.fda.gov — the US Food and Drug Administration, to retrieve that
medication’s official labelThese requests contain only the medication name. They do not include your name, your email, your device identifier, your doses, or anything else about you. Both are public US government APIs and are used without an account or key.
If you never type a medication name, neither service is contacted. The app is fully usable if these requests fail or are blocked.
When you add a lab report or prescription, Medly reads the text on it so it can fill in the details for you instead of making you type them.
This happens entirely on your phone. The photograph is never uploaded — not to us, not to Google, not to any other service. The text recognition runs locally using a component Google Play Services provides on the device, and it works with no network connection at all.
Everything it reads is shown to you for checking before anything is saved. Medly never records a value from a document without you confirming it.
Medly does not decide whether a result is normal. Where a report shows a reference range, that range is the laboratory’s own, copied from the document. Where a report shows none, Medly shows none — it does not supply one.
The first time you open Medly it creates an anonymous account with Google Firebase and begins copying your data to it. There is no sign-in step and no switch to turn on: it is on from the start, so that a lost or broken phone does not take your medication history with it.
What is copied:
Photographs of your medical documents are not copied. They stay on this phone only. If you lose the phone, the values you confirmed survive in your account; the images do not.
The account is anonymous. It is not linked to your name, your email or any Google account unless you later choose to sign in, which attaches the same account rather than creating a second one. Only that account can read its own data; this is enforced by server-side rules, not just by the app.
The copy travels one way today: Medly uploads, and does not yet download. A second device will not receive your data.
To stop it and delete the copy: Settings → Your data → Delete cloud account. That removes everything held under the account, stops the backup, and — since version 1.2.0 — does not quietly start again. Earlier versions created a replacement account on the next launch; that was a bug and it is fixed. Signing in deliberately afterwards resumes the backup.
Your data on the phone is deliberately left alone when you do this. Deleting the backup is a request to stop copying, not an instruction to destroy the medication history on the device in front of you. To remove that too, uninstall the app.
Reminders never depend on any of this. Medly works fully with no network.
Medly uses Firebase Crashlytics to learn about crashes on devices we cannot test. Reports contain stack traces, the device model, the OS version, and the app version.
No medication name, dose, measurement, note, symptom, profile name or email is ever attached to a crash report. This is enforced in the code, not merely promised: reporting only ever receives errors and fixed diagnostic strings.
Crash reporting is disabled entirely in development builds.
Medly is free and shows advertisements through Google AdMob. Ads are what pay for the app; there is no subscription and no purchase.
Google, acting as an independent advertising provider, may collect and process data when an ad is requested or shown, including:
We do not receive this data in a form that identifies you. We see only aggregate reports — impressions, clicks, revenue.
Google’s handling of this data is governed by the Google Privacy Policy and how Google uses information from sites or apps that use its services.
If you are in the EEA, UK or Switzerland, you are asked for consent before any ad is requested, using a Google-certified consent platform. You can change that choice at any time in Settings → Privacy → Ad privacy settings.
Your health data is never used for advertising and is never shared with advertisers. Medly does not send AdMob anything about your medications.
| Permission | Why |
|---|---|
| Notifications | To show medication reminders. Without it the app cannot do its job. |
| Exact alarms | So a reminder arrives at the minute it is due rather than up to an hour late. |
| Full-screen intent | So a dose you mark critical can ring over the lock screen like an alarm. |
| Run at startup | So reminders survive restarting your phone. |
| Ignore battery optimisation | Optional. Stops the system delaying reminders to save power. |
| Internet | For drug-name lookup, optional sync, crash reports and ads. |
Medly declares no camera permission. Taking a photo of a document opens your phone’s own camera app, which hands back only the picture you took.
Medly asks for no permission it does not use.
Medly is not directed at children under 13 and we do not knowingly collect their data. A parent may of course use Medly to manage a child’s medication — in that case the data is the parent’s own record, held under their account.
Full instructions, including what each option removes: Delete your data.
Data held on the device is kept until you delete it or uninstall. Data synced to your account is kept until you delete the account.
Data on the device is held in the app’s private storage, which other apps cannot read. Synced data travels over encrypted connections and is protected by server-side rules that allow only your own account to read or write it. Health data is excluded from Android’s automatic cloud backup and from device-to-device transfer, so it is not copied anywhere you did not choose.
Photographs of medical documents are encrypted on the device with a key held in the phone’s hardware-backed keystore, and are stored in Medly’s private storage where other apps cannot reach them. They are excluded from Android’s automatic cloud backup and from device-to-device transfer.
No system is perfectly secure, and we cannot guarantee absolute security.
If this policy changes materially, the app will say so before the change takes effect. The date at the top always reflects the current version.
Developer: Umesh Ghimire Email: me.umeshuser@gmail.com
By installing or using Medly you agree to these terms. If you do not agree, please do not use the app.
You are granted a personal, non-exclusive, non-transferable, revocable licence to use Medly on devices you own or control, for personal, non-commercial purposes.
You may not sell, sublicense, or redistribute the app, nor decompile or reverse engineer it except where that right cannot be excluded by law.
Medly is a reminder and record-keeping tool. It is not a medical device and it does not give medical advice, diagnosis or treatment.
Never start, stop or change how you take a medication based on this app. Talk to a qualified healthcare professional.
Medly schedules reminders using the alarm facilities Android provides, and takes considerable care to make them survive restarts, battery saving and device sleep. Even so, delivery depends on your device, its manufacturer’s power management, and settings outside the app’s control.
Do not rely on Medly as the sole safeguard for a medication that is critical to your health. You remain responsible for taking your medication.
Anything you enter — medications, doses, measurements, notes, symptoms, profile names — remains yours. We claim no ownership of it. You are responsible for its accuracy, and for having the right to record information about anyone other than yourself whose medication you track.
The app is funded by advertising. Advertisements are supplied by third parties and their content is not endorsed by us. Advertisements are never placed in a way that interferes with logging a dose.
The app is provided “as is” and “as available”. Features may change or be discontinued, and the app may not be available in every territory.
To the fullest extent permitted by law, Umesh Ghimire shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of Medly, including any missed, late or duplicated dose. Nothing in these terms limits liability that cannot be limited under applicable law, including liability for death or personal injury caused by negligence, or for fraud.
These terms are governed by the laws of Nepal, without regard to conflict of law principles.
Umesh Ghimire — me.umeshuser@gmail.com