My vaccine card is a medical record and contains both PII and PHI. It worries me that I don't see a privacy policy. Of course as a developer I can check the sou

My vaccine card is a medical record and contains both PII and PHI. It worries me that I don't see a privacy policy. Of course as a developer I can check the source code, but it's probably best to include a policy.