Privacy Policy

Health Sathi should collect only the information needed to provide an account, appointment, message, clinician review or blood-request workflow.

Sensitive health information

Clinical photos, appointment reasons and private messages are sensitive. They should not be published publicly. Access should be limited to the user, authorized administrators and the verified clinician involved in the service.

Blood requests

A blood-request contact number is public only when the requester explicitly agrees and an administrator verifies the request. Requests can later be closed.

Security

Production deployments should use HTTPS, strong secrets, restricted server access, backups and a production database appropriate for sensitive information. JSON-file storage is suitable for a prototype but should be upgraded before handling large-scale real patient data.

Last updated: 22 August 2026