How Do Hospital Companion Platforms Handle Patient Privacy and Medical Data Protection (DPDPA)?

Non-Disclosure and Confidentiality

Every companion in a professional service signs a non-disclosure agreement (NDA) that prohibits: sharing patient names, medical conditions, or visit details with anyone outside the designated family contacts, photographing the patient without family consent, retaining medical documents after delivery, and discussing patient cases on social media or with other clients. Violation of the NDA results in immediate termination and potential legal action. This contractual confidentiality is the first layer of privacy protection.

Medical Record Handling

When a companion collects medical records (discharge summaries, biopsy blocks, MRI CDs) from a hospital MRD department, the handling protocol is: documents are collected in a sealed envelope or container, transported directly to the family's designated address, handed over only to an authorized family member with signature confirmation, and no copies are retained by the companion or the service. The companion does not open or read the medical records — they are a courier, not a reviewer. After delivery, all record references are deleted from the service's system.

DPDPA Compliance and Data Security

Under the Digital Personal Data Protection Act (DPDPA), patient data must be: processed only for the stated purpose (hospital accompaniment), shared only with consent (designated family members), retained only as long as necessary, and deleted after service completion. Companion platforms comply by: storing patient contact details in encrypted databases, using WhatsApp Business API for secure communication (not personal WhatsApp accounts), limiting access to patient data to authorized service staff only, and deleting patient records after a defined retention period (typically 90 days after service completion, unless required for legal compliance).

Frequently Asked Questions

Can I trust a companion with my parent's medical information?

Yes, if the service has a signed NDA with the companion and a clear data protection policy. Ask the service: "What confidentiality agreement do your companions sign? How is my parent's medical data stored and deleted?" A reputable service will have documented answers and will be transparent about their privacy practices.