privacy-in-practice

MyChart Proxy Access Period Privacy Checklist

A plain checklist for period notes in MyChart or another patient portal when a parent, partner, caregiver, or family member may have proxy access.

MyChart is a common word people use for a patient portal.

Your clinic may use MyChart or another portal.

The privacy question is the same:

Who can see your period notes, messages, and visit details?

Proxy access can help families manage care.

It can also show more than you expect.

This page is not legal advice.

It does not promise privacy.

Ask your clinic before you add private notes.

For app notes outside the portal, use the period tracker data minimization guide.

For a broader portal audit, use the patient portal period data privacy checklist.

1. Find every proxy

Start with the portal account.

Look for words like proxy, family access, delegate, caregiver, parent, guardian, or authorized user.

Ask the clinic:

Who has proxy access now? Who asked for that access? When was it added? Does it expire? Can I see a proxy access list? Can I remove a proxy? Will the proxy get an alert if access changes? Is there a paper form tied to the account?

Write the names down.

Do not guess from the login screen.

2. Ask what the proxy can see

Proxy access is not one simple switch.

Ask what each person can see.

Portal area Ask the clinic Appointments Can the proxy see past and future visits? Visit notes Can the proxy see clinician notes? Messages Can the proxy read messages and replies? Test results Can the proxy see all results? Bills Can the proxy see visit names or charges? Medications Can the proxy see prescriptions? Attachments Can the proxy see photos or files? Forms Can the proxy see answers after submission?

Do not assume "limited access" means period notes are hidden.

Ask for the exact portal sections.

3. Ask about parents and minors

HHS says parents often can access a minor child's records.

HHS also says state or other law can affect access.

That is why you need clinic specific answers.

Ask:

What can a parent see for this age? Does access change at a certain age? Does access change by care type? Are sexual health notes handled differently? Are menstrual notes handled differently? Are messages handled differently than visit notes? Can the teen have a private portal login? Can the teen ask questions without proxy viewing?

Do not ask only, "Is my portal private?"

Ask what each proxy can see.

For a teen focused version, use the teen patient portal checklist.

4. Check messages before you send

Portal messages can become part of the record.

They may also show in alerts.

Before you send a period message, ask:

Who can read portal messages? Can a proxy see sent messages? Can a proxy see replies? Do email alerts include message text? Do app alerts include message text? Can I choose phone call instead? Can I ask the clinic to call at a safe number?

If you need care, do not skip care because of privacy fear.

Ask the clinic for the safest contact path.

5. Keep portal notes short

Use the detail your care team needs.

Skip extra details the portal does not need.

Instead of Try My period is late and I am scared I need a private call about cycle timing Heavy bleeding after sex I need a private nurse call Pregnancy test question I need private follow up Period pain and missed school I need help with cycle pain Birth control side effect I need a private call about a medicine question

This does not hide the record.

It just limits extra words.

For phone and app notes, read period tracking on a shared phone.

6. Check alerts on shared devices

A proxy may not need to open the portal to see a clue.

An alert can show enough.

Check:

Portal app alerts. Email subject lines. Text messages. Calendar links. Watch alerts. Tablet alerts. Shared family email. Shared phone numbers.

Use plain labels when you can.

Turn off previews if they expose care details.

For teen app alerts, use the teen period app checklist.

7. Ask before uploading photos

Photos can carry more than the image.

They may show time, place, body details, labels, or other people.

Before you upload a period photo, ask:

Who can see uploaded photos? Can a proxy see them? Can staff remove a photo later? Does the portal keep old files? Does the photo need to be uploaded at all? Can I describe the issue instead?

Use photos only when they help care.

Ask the clinic what it needs.

8. Know what an app cannot fix

Privacy guidance for health apps favors collecting less data.

That idea helps patients too.

Keep less when less is enough.

But an app cannot control a clinic portal.

Floriva can help keep cycle notes local on your device.

It cannot change MyChart, proxy access, clinic policy, or state law.

For teen setup choices, read Floriva for teens.

9. Use this call script

You can call the clinic and say:

If you are on campus, also check shared devices and accounts.

Use the campus period data privacy checklist.

Quick decision check

Use this before you add period data.

I know who has proxy access. I know what each proxy can see. I checked message privacy. I checked alerts. I checked shared email and phone numbers. I know who to call for private questions. I kept notes as short as care allows.

If you cannot answer these, pause.

Ask the clinic first.