Midi Health

Strengths

• **Is the privacy policy easy to find (within 2 clicks from the homepage)?** Yes. Footer link, one click.
• **Have there been any documented data breaches or security incidents?** No. No data breach found.
• **Is there any public controversy about this product's data handling?** No. None found.

Weaknesses

• **Does the product collect only data clearly necessary for its stated purpose?** No. The privacy policy discloses ad pixels from Meta, Google, and other ad trackers running on the Services, plus Mixpanel behavioral analytics. Advertising trackers on a menopause clinic's platform, where page visits alone (HRT, sexual wellness, cancer survivorship) can reveal health information, is collection well beyond clinical necessity. They also collect government IDs, race/ethnicity, geolocation, and generate behavioral inferences. Separately, the Consumer Health Data supplement describes collecting symptom, diagnosis, treatment, and medication information for research and product-improvement purposes, clinical-grade data gathered for non-treatment reasons.
• **Are purposes stated for each type of data collected?** No. Generic purpose block applies to all data collectively. No data-type-to-purpose mapping.
• **Can users request deletion of their data?** Mixed. Account deletion via email (operations@joinmidi.com). California residents get full CCPA deletion rights, including directing service providers and third parties to delete. But exercising rights requires identity verification with a driver's license or passport copy plus a utility bill, which is meaningful friction, and ironic for a privacy request. No in-app or self-service deletion.
• **Can users export or download their data?** Mixed. CCPA portability for California residents, capped at twice per 12 months. No stated export mechanism for anyone else.
• **Is it written in plain, understandable language (not primarily legal jargon)?** Mixed. Structured with clear headers and readable in parts, but legally dense, and the California section is a wall of statutory text. The most consequential terms (pixel tracking and the HIPAA-limiting clause in the T&C) are the least plainly explained.
• **Does it specifically name what data types are collected?** Mixed. The main collection section is categorical (contact, payment, demographic, usage, identifiers, sensitive data, government IDs, insurance) and defines "Health Data" narrowly as purchases, expressed interests, and inferences from site activity, a marketing definition. Clinically specific categories (conditions, symptoms, diagnoses, testing, treatments, medications, vital signs, photographs) appear only in the Washington/Nevada Consumer Health Data supplement at the bottom of the page. The document contains two conflicting definitions of health data, and the accurate one is the one a typical user is least likely to reach.
• **Does it explain why each category of data is collected?** No. Generic purposes only.
• **Does the product require explicit opt-in consent before collecting sensitive health data?** No. Beyond the passive "by accessing or using the Services, you agree," the Terms & Conditions state that even where HIPAA applies, information submitted that isn't intended and used solely for diagnosis and treatment is not Protected Information and falls only under the privacy policy.
• **Are there granular privacy controls (not just all-or-nothing)?** No. Browser cookie settings, marketing unsubscribe, ad-network opt-outs. Nothing granular about health data or feature-level sharing.
• **Is there a straightforward data deletion process?** No. Email request with ID documentation.
• **Can users withdraw consent after granting it?** Mixed. Marketing and text opt-outs, yes. Tracking opt-out only via browser controls, with a warning that parts of the Services may stop working. CCPA "limit sensitive data use" rights for Californians only. Do Not Track signals are explicitly not honored.
• **Is data sharing limited to named, specific partners?** Mixed. Mixpanel, Meta, and Google are named as tracking recipients — better naming than most. But operational sharing (service providers, affiliates, business partners, asset-transfer successors) is categorical and unnamed. Credit for naming the trackers; the naming reveals the problem.
• **Can users opt out of third-party data sharing?** Mixed. California residents can opt out of sale or sharing. Note the admission: while they say they don't intentionally sell personal information for monetary consideration, they acknowledge some data-sharing practices could be deemed a sale under the CCPA. A health company conceding its practices may legally constitute selling personal data is a scorecard-worthy quote. Non-Californians get only ad-network opt-outs.
• **Is only de-identified or aggregated data shared (no raw personal data)?** No. Identifiable data flows to service providers, ad platforms via pixels, and corporate-transaction parties. The Consumer Health Data section also lists affiliates, business partners, and parties to a corporate transaction as recipients of consumer health data. Aggregated data is additionally shareable without restriction.
• **Does the product state it uses encryption (at rest and in transit)?** Mixed. Transit only, no standards named, no at-rest statement. Thin, liability-shifting security section ("any transmission is at your own risk").

Strengths

• **Is it registered with other regulatory bodies (CE mark, TGA, etc.)?** Yes. They have an NCQA accreditation and a LegitScript certification. HIPAA applies via the Medical Groups, subject to the T&C carve-out.
• **Does the company have named partnerships with hospitals or academic institutions?** Yes. Dr. Mindy Goldman (Clinical Professor of OB-GYN and Reproductive Sciences, UCSF) developed Midi's treatment protocols and chairs its Medical Advisory Board; Dr. Kathleen Jordan is CMO. Clinician-led at the top.
• **Are there independent expert or media reviews of this product?** Unclear. Substantial media coverage (Forbes, SF Examiner, TIME100 Health for the CEO), but business/profile coverage, not clinical evaluation. Trustpilot has 1,000+ reviews. The affiliate-review cloud around Midi is dense, but we couldn't find independent expert evaluations.
• **Are independent reviews generally positive about accuracy and reliability?** Yes. Care-quality sentiment is strongly positive — "finally listened to and believed" is the recurring theme, with praise for clinician knowledge. Operational sentiment (billing, support responsiveness, portal access) is the consistent weak spot. No independent assessment of clinical accuracy exists to anchor a consensus.

Weaknesses

• **Does the product include clear disclaimers about its limitations?** Mixed. Appropriate clinical disclaimers exist, and the cancer-survivorship content is careful about hormone contraindications. But no transparency about the limitations of their own outcome claims — no methodology disclosure, no caveats on promotional statistics.
• **Does it clearly distinguish between clinical and wellness features?** Unclear. Clinical care sits alongside a supplement shop, "Midi Custom Rx" product lines, and an "AgeWell Longevity" offering that leans into the less-evidenced longevity space. The clinical brand's credibility extends over unregulated products without clear boundaries.
• **Is marketing language truthful and not overpromising?** Mixed. Core menopause marketing is evidence-literate, educational, non-fear-based. Pulling it down: the dementia claim (Forbes profile), unpublished outcome statistics used promotionally, longevity positioning, and "covered by insurance" as a headline promise that generates a recurring surprise-billing complaint pattern.

What We Couldn't Find

• **Are accuracy rates or efficacy numbers publicly stated?** Unclear. Numbers are published on their website (weight loss figures, satisfaction stats) without a published methodology behind them.
• **Are partnerships for research purposes (not just marketing endorsements)?** Unclear. Visible collaborations are commercial (employers, health systems, consumer brands). CE-accredited clinician education events are a positive signal, but education isn't research.

Strengths

• **Do founders or key leaders have direct women's health or clinical expertise?** Yes. Co-founder/CEO Joanna Strober is a former VC and serial entrepreneur (sold Kurbo to WW) whose founding story is personal. Her own dismissed perimenopause symptoms. Clinical depth is hired and deep: CCO Dr. Mindy Goldman (ran UCSF's cancer survivorship program, directly relevant to Midi's survivorship line) and CMO Dr. Kathleen Jordan.
• **Do leaders have relevant healthcare or health-tech industry experience?** Yes. Prior digital-health exit, $250M raised, unicorn valuation as of February 2026, 45M covered lives through employer and payer contracts.
• **Is leadership information publicly available and verifiable?** Yes. Full executive team with bios, active LinkedIn presence, extensive press.
• **Does the company have a specific, actionable women's health mission?** Yes. Insurance-covered specialist care for perimenopause and menopause, extended into cancer survivorship. Specific, and aimed at a documented care gap (only a small minority of OB-GYNs receive formal menopause training).
• **Is the mission reflected in actual product decisions and company actions?** Yes. Insurance-first model, clinician training and CE programs, survivorship care line — all mission-consistent. The supplement shop and longevity upsells read as commercial extensions rather than mission-driven.
• **Does the company have a named advisory board or clinical consultants?** Yes. A Medical Advisory Board exists — Goldman chairs it, and the site states protocols are developed with guidance from medical advisors with decades of experience in women's midlife health.
• **Has the company published research or presented at conferences on women's health?** Yes.
• **Does the company engage in public advocacy or education on women's health?** Yes.
• **Is the product's marketing respectful and educational?** Yes. The tone throughout is "you were dismissed and you shouldn't have been," which is validating rather than alarming. No shame framing, no body-anxiety hooks, no manufactured scarcity in the core clinical marketing.
• **Does marketing align with the company's stated mission and values?** Mixed. The clinical marketing is tightly aligned. The mission is insurance-covered specialist care for a documented training gap, and the marketing sells exactly that — the insurance-first message, the clinician credentials, the survivorship line, the CE programs for other clinicians. Consistent. The misalignment is on the commercial edges. The AgeWell longevity arm added advanced bloodwork, optional genetic testing, personalized "longevity plans," and treatments aimed at skin, hair, and weight goals — alongside a supplement shop and the Midi Custom Rx line.

Weaknesses

• None

Strengths

• **Is there representation of diverse body sizes, ages, and abilities?** Mixed. Strong on age representation. Body diversity moderate. Disability absent.
• **Is the service reasonably priced for the target audience?** Mixed. Insured patients average ~$50/visit — genuinely accessible for the covered. Self-pay at $250 initial / $150 follow-up is the high end of the category (competitors run $75–$99). The model is built for the insured.
• **Is there outreach to underserved or marginalized communities?** Mixed. The cancer survivorship program serves a population routinely excluded from menopause care — "you can't have hormones" ends most conversations — built on Goldman's UCSF survivorship expertise. Real inclusion of a medically underserved group. Economic and racial equity outreach: none found.
• **Does the product accommodate different bodies, cycles, or health conditions?** Yes. Broad clinical scope within midlife health (surgical menopause, cancer survivors, contraindicated-for-HRT patients, mood, metabolic) — genuinely built for complex cases mainstream care punts on.

Weaknesses

• **Does the product meet basic accessibility standards (screen reader support, sufficient contrast)?** No. We couldn't find a WCAG statement, accessibility page, or other accessibility documentation.
• **Is the product available in multiple languages?** No. English only, no translation services found.
• **Is the interface usable for people with varying tech literacy?** Unclear. Web-first booking is simple, but care runs through an athenahealth patient portal, and portal-access complaints are a recurring BBB theme. For a 40+ patient base, portal friction is an accessibility issue, not just an annoyance.
• **Does marketing imagery include diverse racial and ethnic representation?** Mixed. Present but thin, and no demographic reporting of their user population.
• **Does the company offer financial assistance, sliding scale, or insurance coverage?** No. Explicitly not enrolled in Medicaid or Medi-Cal, not covered by Medicare or Medicare-related plans — Medicare beneficiaries can only self-pay without reimbursement.
• **Does the company partner with community health organizations?** No. None found; partnerships are employers, health systems, and consumer brands (Peloton).

What We Couldn't Find

• **Is language inclusive of LGBTQ+ and gender-diverse users?** Unclear. Uniformly "women"-framed. No acknowledgment of trans or nonbinary people experiencing menopause.
• **Does the company engage with user feedback from diverse communities?** Unclear. We couldn't find community advisory structures or a way for users to provide feedback.
• **Is there evidence the product was tested with diverse user groups?** Unclear. We couldn't find evidence. No published research means no demographic data at all.