No-PHI patient handouts: sharing home programs without storing patient data

Every digital tool a clinic adopts comes with the same uncomfortable question: where does the patient data go? For large health systems, that question is answered by compliance departments and BAAs. For a solo practitioner or a three-person clinic, it's answered by you, at 9pm, reading a vendor's privacy policy.

There's a simpler answer most HEP tools ignore: don't collect patient data in the first place.

What a zero-PHI home program looks like

A home exercise program needs surprisingly little to be useful:

• the exercises, with instructions and media,
• the dosage — sets, reps, frequency, holds,
• your clinical notes ("keep the elbow tucked"),
• and a way for the right person to open it.

Notice what's not on that list: the patient's name, date of birth, diagnosis codes, contact details. The program itself is clinical content, not clinical records. Identification can happen entirely on your side of the desk.

The zero-PHI model works like this:

1. The patient is an alias. In the software, "R. shoulder post-op, Tuesday" or "MRN-you-keep-elsewhere" — any label that means something to you and nothing to anyone else. The real identity mapping lives where it already lives: in your EMR or your head.
2. Access is an unguessable token. The program is reachable at a long, random link — the same security model as a private Google Docs link or an unlisted video. No password, because there's no account; no account, because there's nothing personal behind it.
3. Share links stay out of search engines. The share pages carry a noindex directive and are excluded in robots.txt, so tokens never surface through search.

Why this is a feature, not a compromise

For the patient, it means zero friction: tap a link or scan a QR code and the program opens. No app download, no registration, no password recovery for someone doing rehab exercises.

For the clinic, it shortens the risk conversation dramatically. A breach of a zero-PHI system exposes... exercise lists. There are no patient identities to leak because none were ever stored. You still follow your professional obligations — the point is that this tool doesn't add a new pile of regulated data to protect.

For families and caregivers, it means the same link works for everyone helping at home. A parent, a spouse, and a home health aide can all open the program without anyone managing "authorized users."

The handout side

Zero-PHI applies to paper too. A well-designed handout carries the program, the dosage, a daily checklist, and a QR code back to the guided digital session — identified by the alias and token, not the patient's name. If it's left on a bus, it's an exercise sheet.

This is the architecture HEP Studio is built on — aliases, unguessable tokens, no patient accounts — so the privacy answer for your clinic is one sentence: no patient-identifying data is stored, by design. You can read more about how it works in practice on the features page.