privacy-in-practice

Patient Portal Period Data Privacy Checklist

A plain privacy checklist for period history in patient portals, including symptoms, visit notes, messages, attachments, downloads, proxy access, screenshots, and backups.

A patient portal can be useful.

It can also make copies of period details.

A short note can turn into a message.

A message can become part of a chart.

A chart can show up in an after visit summary.

This checklist helps you look for those copies. It does not give legal advice. It does not promise privacy.

For visit prep, start with how to use period tracker data at the gynecologist.

1. Find period details in the portal

Start with the places you can see.

Portal place What may show up Check it Visit notes Period dates, pain, bleeding, sex notes After visit summary Symptoms, next steps, diagnosis words Messages Questions, photos, app exports Forms Last period date, pregnancy question Attachments PDFs, screenshots, lab files Downloads Saved records and print files Bills Visit type, test names, care labels Proxy access Family or caregiver access Notifications Message text on a lock screen

You do not have to fix every row today.

Start with the row that feels most exposed.

2. Check what you sent

Portal messages can be easy to write fast.

They can also keep more detail than you meant.

Look for:

Full app exports. Screenshots of cycle charts. Photos of symptoms. Long symptom lists. Sex or pregnancy notes. Partner or family details. Work, school, or travel details. Old drafts. Replies with quoted text.

If the visit is about a pattern, a short summary may work.

Use dates, timing, and the care question first.

3. Use a smaller portal message

You can ask what the care team needs before you send a full file.

For a visit about timing:

text My last three period start dates were:

My main symptom was:

It happened on these cycle days:

My question for the visit is:

For a visit about telehealth, read telehealth period tracking data risks.

4. Check proxy access

Proxy access can be helpful.

It can also expose private notes.

Check who can see:

Messages. Visit notes. After visit summaries. Attachments. Test results. Appointments. Billing details. Downloads. Notifications.

Ask the portal or clinic how proxy access works.

Rules can vary by age, state, clinic, and portal setup.

This page cannot tell you what your portal allows.

5. Check downloads and screenshots

A portal download can leave the portal.

A screenshot can save to photos.

Check:

Downloads folder. Files app. Desktop. Email drafts. Text messages. Cloud drive. Photo library. Recently deleted folder. Computer backup. Shared tablet or laptop.

Deleting a portal message may not delete screenshots, files, backups, or copies sent to someone else.

6. Read the privacy notice

HHS says many health plans and covered health care providers must give a notice of privacy practices.

That notice should explain rights and practices.

It can help you know who to ask.

Look for:

How to request a record. How to ask for a change. How to ask a privacy question. How to file a complaint. How proxy or family access works. How the portal handles messages. How records may be used or shared.

The notice is not a promise that no one will ever see a record.

If you need legal advice, ask a qualified lawyer.

7. Make a portal audit note

Use this small table before you upload or send files.

Question Your answer What care question am I trying to answer? What is the smallest useful summary? Do I need to name sex, pregnancy, or partner details? Do I need to upload a full export? Who can see portal messages? Who has proxy access? Where will downloads save? Do I want a copy of what I sent?

For broader cleanup, use the period tracker data minimization guide.

For HIPAA basics, read period tracker HIPAA.

8. Keep local notes short

Floriva can help you keep short notes on your device.

Example:

That may be enough for some visits.

It does not control what happens after you share.

Screenshots, exports, backups, portal uploads, shared devices, and proxy access are outside any app's control.

For app setup before a visit, read Floriva for gynecologist prep.

If you want to audit the summary after the visit, use the after visit summary period data checklist.