Home / Health data privacy
Health data privacy
Draft, pending legal review.
What kind of data this covers
MedLicense is meant for professional credentials, but clinicians often store related items such as immunization records, TB test results or a copy of a driver's license. Those are sensitive, and this page explains how the app handles them.
No patient records
MedLicense does not need patient information and is not designed to hold it. Please do not attach documents that contain patient data.
Where the data lives
In the individual app, records are encrypted on your device with AES-256-GCM and there is no MedLicense server that receives them. In a team workspace, the encrypted files live in your organization's own Microsoft 365 tenant. See security and IT.
Local document reading
Text recognition runs on your device, so the contents of a scanned document are not sent to a recognition service.
The only online lookups
The NPI lookup sends the number you type to the public NPPES registry, and nothing else about your vault is sent. The lookup page on this website does the same from your browser.
HIPAA and similar laws
Whether HIPAA, a state privacy law or an employment law applies to credential records depends on who you are and how you use the tool. We have not made a compliance claim, and this question is left to legal review and to your own compliance officer.
Related pages
See the privacy notes for the website and app summary.