I feel you haha. I've seen way too much of this and is not how health (which is so precious) should be handled and treated.
We host all services on Microsoft Azure and any API calls are through their Model Foundry. We also strip any kind of PII (Personally Identifiable Information) before we make these calls for added privacy.
We are GDPR compliant (UK/Europe) and have all the compliance for HIPAA in place (although not officially certified since we are not medical).
You can download all your data at any time and even delete it completely from our servers. This is all an option through the app.
Please do register on the website. Would love to hear your further thoughts and any feedback you'd have for us. We are still in testing with early users and would love to have you on board