Terms of Use
iOS Version, 18.1+
Note: The app will be compatible with iOS version 18.1 and each subsequent minor version release of iOS version 18.
iPhone, iPhone 15
Coordinated Vulnerability Disclosure Process
We value the contributions of the security research community. If you believe you have identified a potential security vulnerability in one of our products, we want to know so we can investigate.
Contact Information
To report a potential vulnerability, email CustomerCare@Modular-Medical.com. We would prefer that your message be provided in English.
Information to Provide
Please include the following information:
- Your contact information, including name, organization name, email address, and phone number so we can follow up with you.
- Your preferred method for further contact so that we can establish a secure means of communication.
- A technical description of the concern or vulnerability, including:
- A detailed walkthrough of how the vulnerability was encountered and detected.
- Which products are impacted.
- Any additional information you think would be helpful, including details about the testing environment and tools used during testing.
- Whether you have notified anyone else about the potential vulnerability, such as regulatory agencies, vendors, or vulnerability coordinators.
- Please do not include any personally identifiable information about others in your email submission.
How Modular Medical Will Respond
Within three (3) business days, Modular Medical will confirm that we have received your submission. We may follow up with you to better understand what you have found or to confirm technical details.
We will investigate the potential vulnerability and conduct a risk analysis to determine the appropriate course of action.
Important Information
We ask that you comply with all applicable laws and regulations when conducting your research and avoid actions that could harm products or people. Examples include:
- Brute force testing
- Testing on active devices
- Testing software in production environments
- Exploiting vulnerabilities
- Making changes to a product or system after testing has been completed
By submitting information, you agree that your submission will be governed by Modular Medical's Privacy Policy and Terms and Conditions.
Modular Medical may also, at its discretion, distribute or issue advisories to Information Sharing and Analysis Organizations (ISAOs) and other information-sharing communities, or publish such advisories on this and other designated websites. Upon request, the finder of the issue will be acknowledged in such advisories.
We reserve the right to change any aspect of our coordinated disclosure process at any time without notice and to make exceptions on a case-by-case basis.
