A care alert text says only that a new alert needs a look — open the app; it never carries a reading. The alert email carries the lines with the patient's first name only and goes through a mail service that signs a business associate agreement. Invitation emails and texts for a practice enrollment name the organization and the practice, never the patient or a diagnosis. Support requests you send from the app are emailed to a real person to answer.
A phone notification is one fixed line that says something happened and where to look: never a reading, a medicine, a diagnosis or what someone wrote. The patient's first name appears only where the text for the same thing already carries it (the feed, the Love Bucket, the daily note); care alerts, the care-team feed and appointment reminders carry no name. It is encrypted on its way to the phone's notification service.
Voice recordings for the cloned voice are sent to the voice service that builds the voice and are not stored by us.