How HealAssist protects your health data
Last reviewed
हिन्दी में पढ़ेंQuick answer
HealAssist records who reads your case, quotes, appointments and receipts, serves your documents through links that expire within an hour, and talks to your browser only over an encrypted connection. You can sign out any other device on your account, and you can download, correct or delete your data yourself.
You are handing HealAssist some of the most private information you have. This page describes what HealAssist actually does with it — mechanisms, not reassurances.
What protects your data
| Protection | What it means for you |
|---|---|
| Access logging | Reads of your case, your quotes, your appointments, your receipts and your eligibility documents are recorded — including when HealAssist staff open them. If someone looked at those records, there is a log of it. |
| Encrypted connections | Your browser is told to reach HealAssist only over an encrypted connection, and HealAssist’s own connection to its database is encrypted too. |
| Expiring document links | A link to one of your documents stops working, by default within an hour. Links are generated fresh each time, so an old one cannot be reused. |
| Protected sign-in | Your sign-in token lives in a cookie that scripts running on the page cannot read. |
| Device control | You can see every device signed in to your HealAssist account, and sign out any device other than the one you are using. |
Your rights over your data, and how to use them
India’s Digital Personal Data Protection Act gives you rights over the data HealAssist holds about you, and on HealAssist you exercise them yourself rather than by writing to anyone. You can download a copy of your data, ask for a detail to be corrected, and delete your account. All three are in your HealAssist account under Security & data.
HealAssist also records which version of a consent wording you agreed to and when, so what you agreed to is a matter of record rather than memory.
Data safety questions
Related articles
Download a copy of your HealAssist data
How to request a copy of your personal data from HealAssist under the DPDP Act: where to ask, how the download link reaches you, and how long it lasts.
Delete your HealAssist account
How to delete your HealAssist account under the DPDP Act: how to request it, how to confirm it by email or mobile, the 7-day cooling-off period, and how to cancel.
Was this article helpful?