National AIDS Control Organisation
Ministry of Health & Family Welfare
Government of India
National AIDS Control Organisation (NACO) respects the privacy of users and is committed to protecting personal and health-related information collected through the SOCH Mobile Application (hereinafter referred to as SOCH App).
The SOCH App is developed and managed under the Ministry of Health & Family Welfare, Government of India. The application is hosted on secure Government-approved infrastructure and is intended for healthcare service delivery, programme monitoring, patient management, and related public health activities.
The terms and conditions of this Privacy Policy shall be governed by the laws, rules, and regulations applicable in India, including the Digital Personal Data Protection Act, 2023, where applicable.
Use of the SOCH App may require users to register within the system. Personal information including full name, username/UID, mobile number, gender, date of birth, email address, organizational affiliation, and other authorized identifiers may be collected for user authentication, account management, healthcare service coordination, and security purposes.
The SOCH App collects and processes health-related and programme-related information including HIV testing details, ART linkage status, counselling records, treatment records, laboratory reports (CD4 / Viral Load), service utilization details, medication adherence information, and related healthcare data for official programme implementation and patient care coordination.
By registering in the SOCH App, users consent to receiving official emails, SMS, in-app notifications, and communications related to healthcare services, appointment reminders, programme activities, security alerts, and system updates.
User accounts are protected through secure authentication mechanisms, OTP verification, and encrypted credentials. Users are responsible for maintaining the confidentiality of their login credentials and preventing unauthorized access.
Whenever users access the SOCH App, technical log information is collected automatically. This includes Internet Protocol (IP) address, device model, operating system version, application configuration, date/time of access, and crash diagnostics to ensure security and system reliability.
Where required for facility mapping, outreach activities, or healthcare service delivery, the application may request location access.
Users may disable location services through device settings; however, location-dependent features may not function properly if access is revoked.
Information collected through the SOCH App is confidential and is never sold or commercially distributed.
Information may be shared only with:
All such disclosures shall be subject to applicable confidentiality and security requirements.
Information collected through the SOCH App is retained for the duration necessary for healthcare operations, programme monitoring, legal compliance, and Government record retention guidelines. Account deletion procedures are governed by Section 10 of this policy.
Users of the SOCH Mobile Application can request the deletion of their user account and associated personal data at any time through the following procedure.
How to Submit a Deletion Request
You can request account and data deletion by sending an email to our official helpdesk:
SOCH Mobile App - Account & Data Deletion RequestWhat Gets Deleted
Upon receipt and identity verification of a valid deletion request:
Statutory Health Data Retention Notice
In compliance with Government of India statutory health record retention guidelines, medical and treatment records (such as HIV test history, ART dispensation logs, and CD4/VL lab reports) are retained in secure, archived Government health repositories as required by applicable public health laws. Retained records are strictly restricted to authorized programme administration and cannot be accessed via any deleted user login.
The SOCH App is intended for authorized healthcare service delivery and programme monitoring. Personal information relating to minors is processed only through lawful authorization under official healthcare programmes and applicable Government guidelines.
The SOCH App implements industry-standard technical and organizational safeguards including HTTPS/TLS encryption, authenticated session management, role-based access control, and secure hosting on Government-approved infrastructure.
Authorized service providers engaged for system maintenance or infrastructure support access information strictly on a need-to-know basis under strict confidentiality obligations.
NACO reserves the right to update this Privacy Policy at any time. Any changes will be published at this official URL with a revised effective date.
By accessing or using the SOCH App, users consent to the processing, storage, and handling of information in accordance with this Privacy Policy.
For any questions, concerns, or data deletion requests regarding this Privacy Policy, please contact:
National AIDS Control Organisation (NACO)
PUBLISHED DATE: 14th May, 2026
PUBLISHED BY: National AIDS Control Organisation (NACO)
LAST UPDATED ON: 13th August, 2026