When you buy medicine online, you hand over more than payment details — you reveal a slice of your health record. Nigerian law treats that data with extra weight.
What the NDPA / NDPR cover
The Nigeria Data Protection Act 2023 and its NDPR regulations classify health data as sensitive personal data. Processing requires a lawful basis, minimal collection, and concrete safeguards.
What buyers should look for
A clear privacy policy, named data controller, an opt-in (not pre-ticked) consent for marketing, and a route to delete your account. Anything less is a red flag.
MedOasis posture
We collect the minimum data needed to verify identity and complete a transaction, encrypt sensitive fields at rest, and never sell or share your prescription history with advertisers. Full detail lives in our Privacy and Compliance pages.