Anonymous STI notification: privacy, boundaries, and anti-abuse
Anonymity can help point someone calmly toward testing. It only works when privacy boundaries are clear and abuse has no room. This guide explains what PrivaNotify does and does not do, who can see what, and where the line is.
Privacy is about protection, not hiding. An anonymous message is only anonymous when no unnecessary data is stored.
What we promise
- Your name is never shown to the recipient. Not as a sender, not in metadata, not "by accident".
- We only keep what is strictly necessary to prevent abuse — never longer than needed.
- Your message is not a diagnosis and not medical advice. We always refer to a doctor, clinic, or local health authority.
What the recipient sees of you
Only the message you write
The recipient sees your message, your anonymous sender handle, and any reply channel you choose. Nothing else.
No medical details about you
Your diagnosis, test result, date, or healthcare provider are not included. That is yours to share — or not.
No identifying timestamps
We do not show exact timezone, IP address, or any technical metadata that could point back to you.
What PrivaNotify never stores or shares
- Your real name, email, phone number, or account details to the recipient.
- The body of your message in any public or searchable database.
- Your IP, device id, or browser history in a way tied to your message.
- Medical details you did not put in the message yourself.
Who can see what — at a glance
You
See your draft, your sender handle, and the delivery status. Only from your own device, unless you sign in.
The recipient
Sees the message and nothing else. No profile, no list of past messages, no sender details.
PrivaNotify (abuse prevention only)
Sees the technical signals needed to block spam, threats, and illegal use — not your identity.
Authorities (only via legal request)
Can request information through formal legal channels. PrivaNotify only provides what is legally required, and nothing more.
The line: where anonymity ends
Anonymous is not a free pass. The moment a message becomes threatening, accusing, or illegal, the protection ends.
Accusation or shaming
"You infected me", "you cheated", or other accusations do not belong in an anonymous message. A warning names possible exposure, not who did what.
Threats or coercion
"If you do not test, I will send this to your friends" is blackmail. Anonymity does not protect that — and it is illegal.
Stalking or repeated unwanted contact
One calm message is care. Ten variations of the same message is intimidation. The recipient can opt out at any time.
False medical claims
"You have STI X, you need drug Y" is not anonymous information, it is a medical claim. PrivaNotify is not a doctor and does not diagnose.
Impersonating a clinic or authority
Messages that look like they come from a clinic, doctor, police, or government are misleading and not allowed. PrivaNotify never sends messages "on behalf of" an authority.
How we prevent abuse
- Velocity patrol: many messages in a short time from the same handle are automatically slowed or blocked.
- Pattern detection for threats, doxing, and blackmail — not to "read" your message, but to catch dangerous patterns.
- One-strike policy for the most serious violations: immediate block and report where law requires.
- Report button for recipients: one click to mark a message as unwanted or threatening.
- Public abuse report: how many reports came in, how many were blocked — published so you do not have to take our word for it.
Four checks you can do yourself
- 1Read the message you want to send aloud one more time. Does it sound like care or like an attack?
- 2Ask yourself: "Would I want to receive this from a stranger?"
- 3Check that you name possible exposure without accusation — and that you point to a doctor or clinic.
- 4Do not send it if you are unsure. One well-considered message beats several restless ones.
Recipient wants no more messages?
Every recipient can opt out of future PrivaNotify messages using the link at the bottom of any message. No form, no explanation, no delay. One click and it stops.
Learn about opt-out