How does HealthBank protect patient privacy and confidentiality?

HealthBank has the following privacy and security safeguards in place to protect patient data:

Regulatory compliance
HealthBank complies with the Australian Privacy Principles under the Privacy Act 1988, and follows the standards set by Australia's peak digital health body, the Australian Digital Health Agency.

Data encryption
All data transmitted to and from HealthBank's web servers is encrypted using HTTPS with a valid SSL certificate. Patient information, files, and notes stored on a patient file are encrypted both in transit and at rest.

Data storage and sovereignty
All patient data is stored exclusively on secure servers located in Australia and is never transferred offshore. HealthBank does not share patient information with any third parties.

Activity tracking
HealthBank does not track general site interactions or clicks. The only session data retained is your last sign-in time and IP address, which are used for security purposes.

Practitioner profile visibility
Practitioner profile pages are only publicly viewable if the practitioner chooses to enable them. When enabled, this may include the practitioner's name, photo, profession, professional bio, areas of special interest, and approximate location (for those offering face-to-face clinic services).