Security at MedCall
Security claims in healthcare are often vague on purpose. Ours aren't. This page is the plain-English version of how MedCall protects a consult — no asterisks. For the law we operate under, what we hold and who processes it, see Trust & compliance.
Video and audio travel directly between your browser and your patient's, encrypted with DTLS-SRTP — the WebRTC standard. In a group call, every browser connects directly to every other. There is no media server in the middle that could watch. When a hospital or clinic firewall forces the call through a relay, the relay forwards packets it cannot decrypt. We can't see your consult. Nobody can.
Consultations are not recorded, stored, or retained — anywhere, in any form. Video exists only for the duration of the call, in transit between the two of you. There is no recording feature to accidentally leave on, and no archive to breach.
Our application, database, and file storage run in Sydney. Consult records, chat messages, and shared files are stored in Australia and stay in Australia. One caveat, stated plainly: on the minority of calls that need a network relay, encrypted call traffic routes via our relay provider's nearest edge — for Australian users that is effectively Sydney, and the traffic is unreadable either way.
We store the least we can: your patient's mobile number, the chat messages and files you exchange, and call logs (who joined, when, how long). No Medicare numbers, no clinical notes, no diagnosis data — those belong in your practice software, and we never see them.
Every consult link is a single-use, unguessable token that expires after 24 hours and can be revoked from your dashboard at any moment. Shared files are only reachable through short-lived signed URLs tied to the same token. A forwarded or leaked link goes dead on its own.
Clinician accounts need a confirmed email address, and each clinician is responsible for their own registration. Patients never create accounts at all, so there are no patient passwords to phish and no patient credentials to leak.
MedCall is operated from Australia under the Privacy Act 1988 and the Australian Privacy Principles, with the Notifiable Data Breaches scheme applying to the data we hold and a written breach-response plan behind it. Clinician contact details are never released to patients.
Row-level security on every table, service-role isolation for patient flows, security headers throughout, per-clinician rate limits, and audit trails on every consult event. The boring stuff, done properly.
If you believe you've found a security issue in MedCall, we want to hear about it before anyone else does. Email hello@medcall.au and we'll respond promptly. Good-faith reports are always welcome.
Start free trial