Telehealth and Medical Privacy: A Quick Primer

Not all video apps are completely secure

During the early weeks and months of the pandemic there was a mad dash to move as many patient services online as possible. Many patients turned to free video messaging apps to get in touch with their healthcare providers for much-needed services, not realizing that those apps might not be properly encrypted or secured. 

Even more worryingly, a high percentage of healthcare professionals fall short on knowing what steps to take to make sure everything is properly secured. In short, many of the most popular, free, or inexpensive apps are easier to break into than a video app that meets HIPAA regulations.

Every device you use for a telehealth appointment is a potential “entry point” for hackers

Those who use video messaging apps with more advanced security features aren’t out of the woods, unfortunately. In our sprawling, highly connected healthcare infrastructure, every single device that logs into a network serves as an entry point to that network. If a patient is using their tablet and smartphone to talk to their doctor, that’s two entry points. 

As we’ve noted before, medical devices make tempting targets for hackers who want access to, say, a hospital’s data servers. Unless you’re working at a healthcare facility yourself, the phone, tablet, or computer you’re using to communicate virtually with your doctor likely does not come with enough security to deter a sufficiently determined hacker, who can use your device as a portal into a network.

Telehealth may make it easier for someone to use your credentials

While telehealth has made it much easier to get access to healthcare without leaving your home or office, it’s also made life much easier for identity thieves. If someone has gotten their hands on your insurance information, they can use their smartphone to “be” you during a telehealth appointment, particularly if they bear a passing resemblance to you and both you and your physician are working from small, occasionally grainy screens.

Some apps may show your data to third parties

Some telehealth visits are connected through portals that may allow third parties like developers or employees to view your medical data as part of routine operations.

While the vast majority of people employed at those third parties are just doing their jobs and don’t want anything to do with your medical identity, that’s still complete strangers with access to your sensitive medical information. As you recall, medical identity thieves only need one or two pieces of information about you to successfully steal your medical identity. Once they have it, the impacts can be devastating to your finances and your health.