Is my health data safe on a health app in Kenya?
By My Wellness Health, Editorial team · Reviewed by the My Wellness Health clinical team on 7 Oct 2026 · Updated 7 Oct 2026
You can judge how safely a health app handles your information by checking five things: whether it is DHA certified, whether the company is registered with the Office of the Data Protection Commissioner (ODPC), whether data is encrypted, whether access is logged, and how you can get, correct or delete your records.
Certification, ODPC registration, encryption, audit trail, your rights
| What was checked | What it means for you | How to verify | Next step |
|---|---|---|---|
| For My Wellness Health, DHA tested encryption at rest and in transit, user authentication and access control, audit logging, backup and disaster recovery and data validation, and verified ODPC registration and a data protection impact assessment. | No system can promise that nothing will ever go wrong, but these checks show the protections a provider has put in place and that an independent body has tested them. | Look the app up in DHA's registry, and the company in the ODPC's register of data controllers and processors. | Ask the provider how to request a copy of your records, and keep that request in writing. |
Is my health data safe on a health app?: your questions answered
Frequently asked questions
What does ODPC registration mean?
Organisations that handle personal data in Kenya register with the Office of the Data Protection Commissioner as data controllers or data processors. DHA verified My Wellness Health's registration as both.
Can I get a copy of my health records?
Yes. Section 36 of the Digital Health Act, 2023 gives you the right, on written request, to examine and receive a copy of your personal health information held by a data controller.
Can I ask for wrong information to be corrected?
Yes. Under section 39 of the Act you can ask for inaccurate, outdated, incomplete or misleading data to be corrected, and for data that should no longer be kept to be erased.
What is an audit trail?
A record of who looked at or changed information and when. It means access to your data can be traced.
What is a data protection impact assessment?
A documented review of the risks a system poses to personal data and how they are reduced. DHA reviewed My Wellness Health's as part of certification.