ClinDesk privacy promise
Your patient messages stay on your computer.
Below, where they live, and where they do not.
Where the message goes
- Our servers
- Outside AI services
- Other clouds
How we keep this true
-
On your hard drive.
The day you start using ClinDesk, this folder appears on your computer. The day you stop, it's still there until you decide otherwise. There's no account on our side to close, no export request to file, no waiting for support to free your conversations.
-
On your hardware.
The part of ClinDesk that reads patient messages runs on your computer. Not on a rented cloud server. Not on another AI service. Yours.
-
Not on our servers.
Many reception tools send patient messages to company servers before they can answer. That means every clinic's patient conversations pass through one company. ClinDesk is designed differently: patient conversations stay in the clinic's local workspace. The doctor we built this with wanted that from the start.
-
Not on any cloud.
For patient messages, the important devices are your computer and your phone. ClinDesk works from the computer. Alerts can reach your phone, but they are locked so only your devices can read them.
-
When something needs you.
Your phone wakes up. The alert passes through our notification service, but it is locked for your computer and your phone.
-
If we disappear, this still works.
If our company is gone tomorrow, the app keeps running. Your folder is still on your computer. Your subscription was paying for updates and phone alerts, not for permission to use your own data. That's the design.
05 · WHAT'S ALREADY HAPPENED
Three real headlines you don't want yours next to.
These are not hypotheticals. They are public, documented incidents from cloud-based AI and cloud-based health platforms. Each shows a failure mode that on-device ClinDesk does not have.
- JAN 2025 · DEEPSEEK
AI provider's database left open online.
Wiz Research found a publicly accessible ClickHouse database belonging to a major AI provider, with over a million log entries that included plaintext chat messages and customer API keys.
What happens with ClinDesk: There is no provider database to leak. Your conversations are a folder on your computer. We don't have a copy.
Wiz Research → - FEB 2026 · CHATGPT
A hidden channel turned ChatGPT into a covert leak.
Check Point Research found a vulnerability in ChatGPT's code-execution runtime that let a single malicious prompt exfiltrate user messages and uploaded files through DNS, invisible to the chat UI. OpenAI patched it in February 2026.
What happens with ClinDesk: The on-device AI that reads your patients' messages runs on your computer. There is no cloud channel to compromise.
Check Point Research → - JUL 2023 · BETTERHELP
Health platform shared sensitive intake with Facebook.
The FTC settled with the online-counseling platform BetterHelp for $7.8 million after it shared users' email addresses, IP addresses, and intake answers with Facebook, Snapchat, and ad networks, despite promising not to.
What happens with ClinDesk: Patient data never leaves your computer. There is no third party for us to share it with, even if we wanted to.
FTC press release →
Different problem. Different design.
TWO KINDS OF PROMISE
Some commitments don't change, even if the product does. Some are today's choices, and if they change, ClinDesk will tell you first.
WHAT DOESN'T CHANGE
-
We don't read your patients' words.
Those messages are not training data. No one at our company reviews them. We do not share them with another AI service.
-
Your conversations are a folder, not a hostage.
If you cancel, the folder stays on your computer. Your subscription pays for updates and phone alerts, not for permission to use your own files.
-
Usage data doesn't include message content.
We keep basic app health data only, like whether the app opened or crashed. Patient messages are not part of it.
WHAT'S TRUE TODAY
-
ClinDesk reads messages on your computer.
That is how ClinDesk works today. If we ever add a cloud option, it will be optional, your existing setup will keep working, and you will get an email from ClinDesk before it ships.
-
There's no account.
You pair the app once and it's yours. If that ever changes, same rule: opt-in, advance notice, your existing setup keeps working.
ClinDesk is early. This page is the contract.
FROM THE DOCTOR WE BUILT THIS WITH
My patients tell me things they wouldn't tell anyone else. That data can't live on someone else's cloud. That's why I cared about building this from the start.
Dr. Zavala MyDoctorAway · Tulum, MX If anything here is unclear, write to ClinDesk. The address below reaches Emin, the founder, directly.
Thank you for reading this far.
Emin
Still uncertain? Read the FAQ. Or, when you're ready, see what ClinDesk costs.