Acceptable Use Policy

Access patient records only for care or administration

Open a patient's record only when your work requires it, for example to treat, register or bill that patient. Looking up relatives, colleagues, public figures or yourself out of curiosity is a breach of patient confidentiality, even if your permissions technically allow it. Every record you open is logged.

You must not

• share your password, leave a signed-in session unattended on a shared computer, or sign in as someone else;
• enter false or misleading information into a medical or financial record;
• export, photograph or copy patient data except as your clinic's procedures allow;
• upload malware, or try to get around permissions, tenant separation or rate limits;
• probe, scan or load-test the service without our written permission;
• use the service to send unsolicited messages to patients.

If something goes wrong

If you open the wrong record, see data you shouldn't, or think your account has been used by someone else, tell your administrator immediately. Reporting a mistake early is always better than staying quiet. Security issues can be sent to security@medisphere.com.

Enforcement

Your clinic can restrict or deactivate your account. We may suspend accounts that put patients or the service at risk, and we tell the clinic why.