Who sees my data?
A plain-English breakdown of who has access to your records and how to revoke access.
- Updated
- Updated
- Reading time
- 6 min read
- Tags
- hipaaprivacyaccess
Your records belong to you. This article explains who in the system can see them, why, and how to limit access.
Inside the clinic
Dr. Lin Yu · Provider · Riverside FM
Reviewed your chart
Sam Cole · Front desk · Riverside FM
Updated your insurance card
You · Patient portal · iPhone
Signed in with passkey
Your provider, anyone they actively delegate to (nurses, scribes), and front-desk staff for administrative info only. The audit log shows you every access — visible under My info → Privacy log.
EnWella as the platform
A small on-call engineering team can access encrypted backups for incident recovery. Records are never used for advertising and we never sell PHI to anyone, ever.
When you share records
Records you share via the portal go where you send them — typically another doctor's office. The link is one-time and expires after seven days. You can revoke any share at any time.