Confidant contacts a small, fixed set of services, and nothing else: our license server (are you a paying member of Confidant), our update server (is there a new update for you to download), and — only when you open it — the support chat ("Chat with us"). Nothing else. No model APIs. Your clinical data never goes anywhere.
The calls
1. License validation
Confidant checks your license periodically (silently, in the background) to confirm your subscription is still active. The request sends only your license key. The response is your current subscription status. No session content, no patient data, no usage information.
You'll only notice this if your license has been revoked — Confidant will surface a banner letting you know.
2. App update check
Once an hour while you're online (and once every time the app launches), Confidant asks our update server whether a new version is available. The request sends only your current version number. The response is metadata about the latest release.
If you're offline, the check quietly fails and retries later. Confidant works exactly the same — you just don't get update notifications until you reconnect.
3. AI model update check
When the app starts, Confidant checks if the AI note model has a newer version available. Same shape as the app update check — sends only the version of the model you have installed.
4. Support chat
Clicking the chat pill in the corner of the app loads our support messenger (Intercom). Nothing loads until you click it, and the conversation is anonymous — no name, no email, and nothing from your sessions is attached. If you never open the chat, this call never happens. Never include a screenshot including PHI in the chat.
Can I run Confidant with no network at all?
Clinically, yes — recording, transcription, and note generation all run on your device and keep working with the network unplugged. What doesn't work offline is the housekeeping above: update checks and license verification quietly fail and retry once you reconnect. Confidant needs to reach our license server occasionally to confirm your subscription, so it can't be configured to never connect; if a full year passes without a successful check, you'll see "We couldn't verify your license. Updates are paused until you reconnect." — see Renewing your subscription for the details.
How can I verify this?
Two ways:
Use Little Snitch (macOS) or Glasswire (Windows) to monitor outbound connections from Confidant. You'll see the endpoints listed above and nothing else.
Open Settings › Privacy › Privacy & security › Network access. The list shows recent network activity — every service Confidant has contacted, with the timestamp of the last request.
If you ever see a connection that doesn't fit into one of these buckets, that's a bug — please report it.