Identify the recipient of each upload

Find the legal medical practice providing care and the channel it uses for clinical records. Ask whether a website intake form goes to that practice, a separate platform, or both. You do not need to understand every technical subcontractor to ask who is responsible for your medical information and whom to contact about a privacy concern.

A laboratory report can contain your name, date of birth, identifying numbers, and unrelated test results as well as the hormone value you intend to share. Upload it through the clinical team’s designated channel. If a salesperson requests a complete report in a public comment or ordinary social-media conversation, ask for the appropriate private clinical route instead.

HIPAA does not cover every health-related app

HHS explains that HIPAA generally does not protect health information in apps you use personally unless the relevant covered-entity or business-associate relationship applies. Information can be medically sensitive without every company handling it being subject to HIPAA.

Read the privacy notice that applies to the service you are actually using. A clinic’s notice and a separate consumer app’s policy may address different information and organizations. Ask about optional data sharing, advertising uses, retention, and deletion where these are unclear. A reassuring badge or the word “secure” does not answer all of those questions. Save the relevant notice or its version date when making a decision, especially if separate consent screens offer optional uses of your information. Avoid assuming that one policy covers every link in the care process.

Keep the appointment private at your end

HHS recommends practical measures such as a private location, headphones when needed, and multifactor authentication when available. Its guidance also suggests considering nearby devices that could overhear or record the visit. These are steps a patient can take without needing to evaluate the platform’s software.

Think about the whole visit, including notifications and the written summary afterward. A shared tablet may display a message preview even after the video call ends. Tell the practice which telephone number or email address is appropriate for contact and ask what appears in routine reminders. If you need a support person present, tell the clinician who is with you rather than leaving that participation ambiguous.

Share enough for care through the right channel

Privacy should not mean withholding a relevant medicine or diagnosis from the treating clinician. The aim is to give accurate information to the people responsible for care while avoiding unnecessary disclosure elsewhere. Ask the clinical team what records it needs and how to submit them safely.

For a photograph of a prescription or a symptom, check the background for unrelated documents or other people’s information. Do not crop away details the clinician needs to identify the medicine, but avoid sharing the same unredacted image in a public review. If you are uncertain whether a request is genuine, contact the practice using a previously verified number rather than replying to an unexpected message.

Plan for records access after the subscription ends

Ask how to obtain visit notes, prescriptions, and laboratory reports if you close the account. Clinical record retention and deletion of a consumer login are different questions. A request to delete an app account should not be assumed to erase the medical record or guarantee that you have already saved everything needed for continuity of care.

HHS describes patient access rights for records held by covered providers. For the practical transition, request copies before losing convenient portal access and store them securely. Our records-transfer guide explains what to gather. A useful privacy decision leaves you knowing both how information is protected and how you can obtain it when you need another clinician to review your care.

Keep exploring

Comparing services? Start with our best provider shortlist, read our provider reviews or compare current offers.

Sources & further reading

  1. HHS: telehealth privacy and security tips for patients
  2. HHS: personal phones, health apps, and the limits of HIPAA protection
  3. HHS: obtaining and correcting your medical records