Minimum data
We ask only for what is needed to see the patient and send notices. An optional field never becomes required “just in case”.
25 · Always show the minimum
Privacy in the interface
Privacy is designed on every screen: what is shown, to whom, and for how long. A notification on a locked phone or an agenda in the waiting room is interface too.
The lock screen
Anyone who looks at the locked phone can read the notification. Choose what it should say.
Monday, November 29:41
Heliodore
The agenda on a shared screen
A clinic has eyes all around. The hide button covers names and reasons in one gesture.
- 9:00Ana ExampleCheckupConfirmed
- 10:00Luis SampleFirst visitConfirmed
- 11:00Rosa DemoFollow-upConfirmed
Principles
Show only what is needed
The full name, the national ID number (cédula) and the reason for the visit appear only where they are needed, and can be hidden.
Clear consent
Pre-registration includes a consent checkbox in plain language. The legal texts are under review.
Rules by channel
| Channel | May include | Must not include |
|---|---|---|
| Phone notification | “You have a new message in Heliodore” | Name, reason, result |
| WhatsApp or SMS reminder | First name (if the doctor chose it), date, time and place | Reason, specialty, diagnosis, national ID number |
| The same as the message and a link with no visible identifiers | Attached clinical documents without protection | |
| Waiting room screen | Queue number or initials | Full names and reasons |
| Screenshots and demos | Only labeled fictional data | Any real data |
| Support | A description of the problem | Patient data (see the support site) |