How PhysioDesk protects information
What keeps patients' records and clinics' accounts safe, for patients using the directory, the patient portal or the app, and for clinics using the software.
For patients
Your records are kept by your clinic, and only your clinic's own team can open them, each staff member only as far as their role allows. PhysioDesk's own team can reach them only through an emergency procedure that needs a written reason, runs out on its own and is recorded.
Every time a record is opened, changed or exported, it is written to a log that cannot be altered without it showing. You can download a copy of your record from the patient portal, and ask your clinic for a copy or a correction with Privacy request in the app or the portal.
Notifications say what they are about, never a diagnosis, what was done in a session, or an amount of money. When you write a review, your mobile number is never shown on the site.
For clinics
Each clinic sees only its own:
which clinic a request is for comes from the signed-in account, never from what a page sends, so one clinic's records cannot be reached from another's.
Roles:
owners, staff and patients each see only what their role allows, and the owner adds and removes staff logins.
Sign-ins:
passwords are stored only as one-way hashes. A sign-in lasts a week and is renewed out of sight every fifteen minutes; an old renewal token coming back ends it, and changing a password signs out every other device. Repeated wrong passwords lock the account for fifteen minutes.
A record of every access:
each sign-in, and every time a patient record is opened, changed or exported, goes into a tamper-evident log that is kept for at least six years and never edited.
Encrypted connections:
traffic between browsers, the app and our servers is encrypted, and browsers are told never to connect over anything else.
Nothing is lost by mistake:
a deleted record, or a closed clinic, is hidden and kept rather than erased.
Patient portal controls:
the clinic decides whether its patients can see appointments, history and bills.
The app:
keeps its sign-in in the phone's secure keychain and stores no patient records on the phone.
Clinic owners can download all of their clinic's data from Settings on the website at any time.
Reporting a security problem
If you think you have found a security problem in PhysioDesk, email support@physiodesk.org with what you saw. Please do not open or change anyone else's data to show it.