Privacy by design

Echo was founded by patients, so we understand that your personal data is your business. That’s why we work to the principle ‘privacy by design’. This means using as little of your personal information as possible, and ensuring that your data is encrypted every step of the way.

Echo is registered with the Information Commissioner's Office, the General Pharmaceutical Council (GPhC), and is proud to be part of the official NHS apps library. These bodies provide external oversight of our systems and processes, ensuring your data is secure.


Banking-grade security

Your data is safe with us. We use banking-grade security to encrypt your personal details and keep them secure.


Regulated by NHS England

Echo is fully regulated and assessed by the NHS, GPhC and ICO.


Data protection & GDPR

We fully comply with GDPR and the Data Protection Act. Read our plain English privacy policy to find out how we manage your data.

Secure packaging

All medicine is sent in discreet, tamper-proof packaging designed to fit through your letterbox.

All our packaging is unmarked and 100% recyclable. Bulkier items, such as cold-chain or controlled medicine must be signed for, but are delivered to your chosen address at no extra charge to you or the NHS.