Last updated: August 8, 2026

Privacy & Patient Protection

MedGram is designed to support responsible clinical collaboration while protecting patient privacy. Patient-identifying information must not be entered into features designated for de-identified clinical use. Users are responsible for ensuring clinical content is appropriately de-identified before submission.

1. What Not to Include

Do not include any of the following in clinical content submitted to MedGram:

Patient names
Medical record numbers (MRNs)
Dates of birth
Phone numbers
Email addresses
Physical addresses
Government or insurance identification numbers (e.g., Social Security numbers, insurance member IDs)
Identifiable patient photographs or images
Any other information that could identify an individual

When clinical context is necessary, use non-identifying references such as "54-year-old male" or "Patient A".

2. Where This Applies

The de-identification requirement applies to every feature where you can type or upload clinical information, including the Clinical Copilot, Medical Cases, Grand Rounds, Clinical Answers, the Ambient Clinical Scribe, the Note Builder and related clinical documentation tools, and any other clinical input surface on MedGram.

3. How MedGram Enforces It

MedGram automatically screens submissions to designated clinical tools for common identifiers — such as MRNs, dates of birth, phone numbers, email addresses, physical addresses, and names — and will block content that appears to contain patient-identifying information with the message:

"Patient information detected. Please remove patient-identifying information before continuing."

This screening is a safeguard, not a guarantee. It may not catch every identifier, and you remain solely responsible for ensuring all clinical content is appropriately de-identified before submission.

4. Your Responsibility

You are responsible for ensuring that any clinical content you submit to MedGram is appropriately de-identified in compliance with applicable healthcare privacy laws, including HIPAA's Safe Harbor de-identification standard where applicable. If you are unsure whether content is sufficiently de-identified, do not submit it.

5. MedGram Is Not a Covered Entity

MedGram is a professional networking platform, not a healthcare provider or HIPAA covered entity. The protections described here are platform safeguards to support responsible clinical collaboration — they do not create a business-associate or covered-entity relationship between you and MedGram.

6. Reporting a Concern

If you believe identifiable patient information has been posted on MedGram, please report it immediately so we can remove it. You can report a post in-app or contact us at contact@medgram.org.

HIPAA Compliance & Patient Protection