How we keep your data safe
Version 2026-11 · A plain-language summary for patients of how ConfirmDoc, a brand of Dady Affordable Hospitals Private Limited, protects your account and your health information. Hospitals and their auditors can read the detailed Security Overview.
Your account
- You sign in with your mobile number and a one-time code. There is no password to steal. Never share the code — ConfirmDoc staff will never ask for it.
- The patient app can be locked with your fingerprint, face or phone PIN, and hides your screen in the app switcher.
- Screenshots are blocked on screens with prescriptions, reports and other records.
- Sessions are short, and signing out on one device ends that session straight away.
Your health records
- Your records belong to the hospital, clinic or lab that treats you, and only staff treating you can open them. Each hospital's data is kept apart from every other hospital's, and the database itself enforces it.
- Sensitive records (for example mental-health or HIV care) need a stated reason to open, and an administrator reviews every such opening.
- Every opening of your record is logged in a log nobody can edit. You can see who opened your records in Privacy settings.
How data is protected
- Encrypted in transit (HTTPS everywhere) and encrypted at rest. ID numbers and other sensitive fields are encrypted again by the application (AES-256-GCM).
- Data is stored in India, backed up every night (encrypted) and each backup is checked.
- Files you upload are checked for their real type and scanned for viruses.
- Payments: you pay the provider through its payment service (for example Razorpay) or at the centre. We never see or store card numbers, UPI PINs or bank passwords.
- Video consultations run in a private room that only you and your doctor can join. If the hospital records a consultation, the recording is part of your hospital record, only you and your care team can play it, and you can say no to recordings in Privacy settings.
What we never do
- We do not sell your data, and we do not use your health information for advertising.
- We do not share your records through ABDM without your consent. See ABDM & your ABHA.
- ConfirmDoc support staff can see a hospital's data only when that hospital approves it, for a limited time, and every screen they open is logged.
Your rights
You can see, download, correct or delete your data, nominate someone, and withdraw consent — under the Digital Personal Data Protection Act, 2023. Use Privacy settings in the app or see the Privacy notice.
If something goes wrong
- If a breach affects you, we will tell you and the authorities (CERT-In and the Data Protection Board of India) as the law requires.
- Seen something suspicious, or found a security problem? Use [Report a problem](/report) and choose "Privacy", or write to the Grievance Officer on the Grievance page. We acknowledge within one working day.