What Doctolib's terms say
Doctolib's terms of service and privacy policy have 40 rated points: 1 serious, 5 bad, 16 worth knowing and 18 good. 29 apply whenever you use the site, signed in or not; 11 only once you have an account.
Whenever you use Doctolib
Serious 1
Your personal data is used for automated decision-making, profiling or AI training
"Training AI models (e.g. text and voice recognition) to create innovative solutions and improve our products (time, teleconsultation, video and sound quality), distance from search page, search queries, etc." [...] Microsoft Azure (Azure AI), Google (Gemini), Anthropic (Claude) make available AI models for the Health Assistant (Assistant Santé).
Bad 4
If you offer suggestions to the service, they become the owner of the ideas that you give them
"If a User provides comments to Doctolib concerning the functionnality or performance of the Services (including the identification of errors or improvements), the User commits to conceding to Doctolib without restriction or payment, any right, title and interest for them."
A secure, anonymized record of your data may be kept for analytical purposes after the data retention period ends
"At the end of the retention period, your Personal Data is archived, permanently deleted or anonymized."
Information is gathered about you through third parties
"Doctolib may collect your Personal Data from third parties."
Your personal data may be disclosed to comply with government requests without notice to you
"The personal data processed by AWS is stored within the European Economic Area (EEA), without any access from outside the EEA in the context of the service. The parent company of AWS is established in the United States. In specific cases, AWS may therefore be required to comply with the law or a valid and binding injunction of a government authority (USA Patriot Act, FISA Section 702, Cloud Act, EO 12333), in which case personal data may be accessed from outside the EEA, particularly from the United States, as described here."
Worth knowing 11
First-party cookies are used
Where it says this ↗Blocking first-party cookies may limit your ability to use the service
Blocking first party cookies may limit your ability to use the service
Where it says this ↗There is a date of the last update of the agreements
"April 2026 version"
This service is only available for use individually and non-commercially
"Only use the platform and it's services for private use. These services cannot be used for commercial or lucrative use."
The service is provided 'as is' and to be used at your sole risk
"The user understands and consents to the fact that the Doctolib Platform has no obligation to answer to any particular demand and is provided 'as is'. Doctolib excludes, where the law sees fit, any warranty of any kind."
You agree not to use the service for illegal purposes
"Only use the services in accordance with the laws and regulations applicable to this contract"
The court of law governing the terms is in location X
The court of law governing the terms is in France
"These ToU are governed by French law. The User is informed that the Doctolib Platform and the Services are addressed to Users residing in France and are subject to French law. By using the Doctolib Services, the User submits to French law."
Failure to enforce any provision of the Terms of Service does not constitute a waiver of such provision
"The fact, for either Party, of not availing itself of one or more provisions of the Contract may in no case imply the waiver by that Party to avail itself of it later."
Third parties are involved in operating the service
Third parties are involved in operating the service (AWS)
"Doctolib also uses Amazon Web Services for hosting Health Data."
This service assumes no responsibility and liability for the contents of links to other websites
"The Doctolib Platform may contain hyperlinks to other websites or online sources, other than those operated by Doctolib. Doctolib is not responsible for the availability of these external online sites and sources and declines all responsibility for the content, products, services, advertisements or any other material available on or from these sites or sources."
Invalidity of any portion of the Terms of Service does not entail invalidity of its remainder
"In the event that certain provisions of the Agreement are unenforceable for any reason, including due to any applicable law or regulation, Doctolib and the User will remain bound by the other provisions of the Contract and will endeavor to remedy the unenforceable clauses in the same spirit as the one that presided at the conclusion."
Good 13
A list of all cookies used by the service is provided
A list of all cookies set by the website is provided
Where it says this ↗Personal information that is shared outside its jurisdiction is processed according to the original jurisdiction’s data protection standards
"In order to provide it's services, Doctolib can resort to third-party providers located outside the European Union. If the transfer happens with a third-party country whose legislation wasn't recognized as offering an adequate amount of protection to the user's personal data, Doctolib will make sure that necessary measures will be taken in conformance with the Loi Informatique et Libertés and the GDPR."
Your data is processed and stored in a country that is friendlier to user privacy protection
Your data is processed and stored in a country that is friendlier to user privacy protection (E.U.)
"All health personal data is stored inside of the European Union"
The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection
The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection (France)
"These ToU are governed by French law. The User is informed that the Doctolib Platform and the Services are addressed to Users residing in France and are subject to French law. By using the Doctolib Services, the User submits to French law."
You aren’t forced into binding arbitration in case of disputes
"Any difficulties relating to the validity, application or interpretation of the Contract will be subject, in the absence of an amicable agreement, to the jurisdiction of the competent Courts in accordance with French law. The User may initiate any legal action relating to these ToU before the competent court of his place of residence or the competent court of the place of establishment of Doctolib in France."
This service claims that your personal data is not being sold
"Doctolib prohibits itself from using Health Data for marketing, advertising, or statistical purposes."
The service claims to be GDPR compliant for European users
"Doctolib undertakes to comply with the French and European regulations on the protection of Personal Data, in particular the General Data Protection Regulation (EU) of 27 April 2016 (“GDPR”) and the amended Loi Informatique et Libertés of 6 January 1978 (“LIL”)."
Information is provided about how your personal data is used
"How is Personal Data used?"
Information is provided about what kind of personal information is collected
"What kind of Personal Data is used?"
You can request access, correction and/or deletion of your data
"In accordance with the GDPR and French Law No. 78-17 of 6 January 1978, you have the following rights to this Personal Data: Right of access (Art. 15 GDPR): you can at any time access the personal information concerning you and held by Doctolib. Right to rectification (Article 16 GDPR), and right to erasure (Article 17 GDPR): you can request the modification or deletion of your Personal Data."
This service provides a list of third parties involved in its operation
"List of Subcontractors used in the Doctolib services presented by categories of activities."
Contact information from a Data Protection Officer (DPO) is provided
"For more information and to exercise your rights, you can contact Doctolib at the following address: Doctolib – DPO, 54 quai Charles Pasqua, 92300 Levallois-Perret or by email at [email protected]."
When the service wants to change its terms, you are notified a week or more in advance
"In the event of significant changes (relating to the purposes of processing, the Personal Data collected, the exercise of rights, the transfer of Personal Data) of the terms of this Policy, Doctolib undertakes to inform you by any written means within a minimum period of fifteen (15) days before their effective date."
If you have a Doctolib account
Bad 1
You must provide your identifiable information
At sign up, users are required to provide their phone number, birthday and an email adress. If you don't create an account the enjoyment of the service is extremely limited.
Where it says this ↗
Worth knowing 5
The service suspends your account after inactivity for a certain or uncertain time
The service suspends your account after 3 years of inactivity
"If the User Account remains inactive for three (3) years, then the User Account and the Associated Documents will be deleted."
This service is only available to users over a certain age
This service is only available to users over 15 years old
"The use of the Services is reserved for Users, natural persons over fifteen (15) years of age with the ability to subscribe to obligations in accordance with applicable law in their jurisdiction."
Minors must have the authorization of their legal guardians to use the service
"It is nevertheless specified that Users who are minors will only be able to benefit from the Services to the extent that this is authorized by the applicable law in their jurisdiction, or will have to obtain the authorization of their legal guardians."
You must report to the service any unauthorized use of your account or any breach of security
"The User is solely responsible for any misuse, loss or unauthorized use of his/her Identifiers. In all the cases mentioned above, the User is obliged to notify Doctolib without delay [...]"
You are responsible for maintaining the security of your account and for the activities on your account
"The User undertakes to keep secret the Identifiers entrusted to him by Doctolib when creating his User Account or as subsequently chosen by him, and not to disclose them. The User is solely responsible for any misuse, loss or unauthorized use of his/her Identifiers. [...] Any access to and use of the Services from the User Account will be considered to have been made by the User."
Good 5
You will be notified about website maintenance
"Doctolib provides the User with an online registration mechanism to inform him of scheduled or emergency maintenance operations resulting in a suspension of the Services. The User is invited to register for this information mechanism in order to receive maintenance alerts."
Two factor authentication is provided for your account
"Doctolib implements two-factor authentication to enhance the security of the User Account."
You have the right to leave this service at any time
"The User may at any time, and without having to justify his decision, terminate the Contract by logging into his User Account's «Account» section and following the process of deleting the account. Detailed information on the deletion of the account is available in the dedicated form available in the Help Center."
You can retrieve an archive of your data
"Right to data portability (Art. 20 GDPR): you have the possibility to request to retrieve the Personal Data that you have provided to Doctolib, for personal use or to transmit it to a third party of your choice."
You can set guidelines for the use of your personal information after your death
"Right to define the fate of Personal Data after your death and to choose to whom Doctolib will communicate (or not) your Personal Data to a third party that they have previously designated (more). As soon as Doctolib becomes aware of your death and in the absence of instructions from you, Doctolib undertakes to destroy your Personal Data, unless their retention is necessary for probationary purposes or to meet a legal obligation (such as the retention of the patient record)."
The documents
- Conditions d'Utilisation des Services (Services Terms of Use) ↗
- Informations sur les Cookies et technologies analogues (Cookie Policy) ↗
- Politique de protection des Données à caractère personnel (Personal data Protection Policy) ↗
Ratings by ToS;DR volunteers; they can lag behind the current terms. Not legal advice.