How We Protect Your Medical Information
Your records are medical information, so we treat them that way: they travel over encrypted connections, are stored in private storage that is never public, and can be seen only by the China MedPass coordinators working on your case. We never sell your data, and you can delete your account at any time.
By China MedPass · Updated · How we write
Signing in
- No patient passwords to steal: you sign in with a one-time 6-digit code sent to your email.
- Each code expires after 10 minutes and stops working after 5 wrong attempts; how often codes can be requested is limited.
- Your session is kept in a secure cookie that page scripts cannot read. It ends when you sign out, and immediately if you delete your account.
- The patient portal only ever shows your own case — the server checks your verified email on every request.
Your files
- Every page, form and upload uses an encrypted connection (HTTPS).
- Files go straight from your browser into private cloud storage (Alibaba Cloud) through a signed link that is valid for a short time only.
- Nothing you upload has a public address. Files open only through download links that expire after 10 minutes.
- The audio of video consultations is recorded for your medical record — the call screen says so — and is kept in the same private storage, available only to our staff.
Who can see your information
- Our staff sign in with individual accounts. Coordinators see only the cases assigned to them.
- We share what is needed with the hospital and doctors treating you, and only with your knowledge.
- We use Alibaba Cloud services to run our systems, including AI tools for interpretation and summaries that our staff review.
- We do not sell, rent or trade your information, and we do not use it for advertising.
Your control
- See and correct your details in the portal at any time.
- Ask for a copy of what we hold by messaging your coordinator or emailing [email protected].
- Delete your account from Profile in the portal or in the app. Your sign-in is removed at once; records the law requires us to keep are kept only as long as required.
- We keep case information for up to 24 months after your last contact with us, then delete it.
FAQ
Do I need an account to get a free assessment?
No. The free assessment form works without an account. The patient portal is optional — it gives you one private place for your case, messages, video consultations and records.
Is emailing my records safer than uploading them?
Uploading to the portal is the better option: the connection is encrypted and files go straight into private storage. Email attachments sit in several mailboxes and are harder to delete later.
Who at China MedPass can read my records?
The coordinators working on your case and our administrators. Coordinators cannot open cases that are not assigned to them.
Where is my data stored?
On Alibaba Cloud servers. The parts needed for your care are shared with the hospital treating you in China. See our Privacy Policy for details.
How do I report a security concern?
Email [email protected]. We look into every report.
Related: Privacy policy · Terms of service · Create your patient account
Ready when you are
Start with a free assessment — no account needed. Create your private portal whenever you want one.
Get Free Assessment