Google Drive storage — OAuth use

CareBite is a healthcare app for Pakistan. Personal users sign in with Google. Their health records (blood pressure, sugar, weight, lab reports) are stored in a folder named CareBite in the same Google account's Drive.

CareBite does not read, list, or modify any other files in the user's Google Drive. We only create or update one backup file: carebite-health-backup.json.

OAuth scopes requested

https://www.googleapis.com/auth/drive.file

Create and update the CareBite backup file in the user's Drive. This scope limits access to files created or opened by CareBite — not the user's other Drive documents.

https://www.googleapis.com/auth/drive.metadata.readonly

Find the existing CareBite folder and backup file when the user taps Restore. Required only to locate our own backup — not to read file contents outside the CareBite backup.

Why not a narrower scope?

drive.file alone cannot search the user's Drive for an existing CareBite folder after reinstall or on a new device. drive.metadata.readonly is the minimum scope that lets Restore locate only our folder and backup file by name — without reading other files' contents.

User flow (in the app)

User signs in to CareBite (phone OTP or Google — login uses only openid, profile, email).
User opens Profile → Google Drive Backup.
User taps Save records to Google Drive or Restore.
CareBite shows an in-app scope explanation, then Google OAuth consent (expand "Show all" to read scopes).
Save creates/updates CareBite/carebite-health-backup.json via drive.file.
Restore searches for the CareBite folder and backup file via drive.metadata.readonly, then downloads via drive.file.
User may open the backup folder in Google Drive from the app, or Disconnect at any time.

Data stored in Drive

JSON backup of health records the user entered in CareBite (BP, sugar, weight, lab).
Stored in folder: CareBite/
Filename: carebite-health-backup.json
No chat messages, payment data, or CNIC images are written to Drive.

App & policy links

Homepage: https://carebite.pk/
Web app: https://carebite.pk/app/
About: https://carebite.pk/about/
Privacy policy: https://carebite.pk/privacy/
Terms: https://carebite.pk/terms/

Contact

Operator: CareBite (Pakistan)
Support: appdrlive@gmail.com
Phone: +92 301 7687176
Address: 176/9.L, Chichawatni, Pakistan

Public page for Google OAuth verification. Last updated: September 2026.