Legal
Privacy
Patient data belongs to the clinic that collected it. This page says what we do with it, in words a doctor can read between patients.
Last updated: 3 October 2026. This is a plain-language summary; it is not legal advice.
Your data is yours.
Patient records belong to the clinic that entered them. Write to hello@myopdesk.com and we will arrange a copy of your records. There is no fee for asking.
What we store
- Patient records you enter: name, phone, sex, age or date of birth, and ABHA number and address if you enter them.
- Visit details: chief complaint, emergency flag, vitals, notes, prescriptions, follow-up reasons, and review-request status.
- Staff: name, phone number, and a password stored as an argon2 hash.
- Clinic: name, address, GSTIN, doctor registration number, and a letterhead scan stored as text.
- Error logs: request method, path, status, time, and client IP address. They do not include patient details.
- Website enquiries: clinic name, your name, phone, email, city, number of doctors, message, and source, plus a salted hash of the IP prefix. This marketing site does not hold patient records.
What we never do
- We do not sell patient data to pharmacies, diagnostic chains, insurers or advertisers.
- We do not use identifiable patient data to train models.
- We do not use your patients’ contact details to message them for OPDesk.
Who processes it
Hostinger hosts this website and the clinic app. Supabase hosts the clinic database in Mumbai, India.
Who can see it
Only the users you create in your clinic, scoped so one clinic cannot read another. Ask before anyone opens your data.
Deletion
Ask us to delete your clinic and we will delete it. Ask for a copy of your records first if you want one. Deletion is final.
ABDM
No live ABDM connection yet. Patient records include ABHA fields.
Privacy and grievance contact
Write to hello@myopdesk.com. That address is the privacy and grievance contact. You can also use the contact page.