Privacy and safety
Your patients trust your clinic with their details. Here is, in plain words, what Aria collects, what it never asks for, and what we still finish with you before your patients use it.
Where we are today: Aria has only been tested with made-up details so far. It has not handled real patients yet.
What Aria asks patients for
Only what is needed to book a visit.
Aria asks for
- Name
- Phone number
- New or existing patient
- A short reason for the visit, like "check-up" or "tooth pain"
- A preferred day and time
Aria never asks for
- Medical history
- ID numbers, like Aadhaar or PAN
- Home addresses
- Payment or bank details
Safe answers in the chat
- Aria never gives medical advice, never says what a symptom means and never suggests medicines. It tells the patient the doctor will examine and advise.
- For an emergency, it tells the patient to call 112 or the clinic straight away.
- Its first reply tells the patient what is stored.
- If asked, it says it is the clinic's virtual assistant, not a person.
- It only offers times that are really free. A booking is checked again just before it is made, so two patients can't get the same slot.
- We test it with tricky messages, such as requests for medicine doses or attempts to trick it into breaking its rules.
Your clinic page
- Each clinic has its own login and sees only its own patients.
- Phone numbers are partly hidden. Showing a full number takes a click, and every time it is recorded.
- A receptionist login can show only a limited number of phone numbers per hour.
- After 5 wrong passwords, that login is paused for 15 minutes.
The clinic page is ready as a demo and is being connected to Aria.
What we finish with you before your patients use Aria
These are not done yet. We complete them with each clinic before go-live.
- Run Aria on a proper rented server, ideally in India, with its own secure web address.
- Use an AI service whose terms say it does not train on your patients' messages, and say how long messages are kept and where they are processed.
- Agree with you the short line patients see in Aria's first reply, and your clinic's privacy notice.
- Write down how a patient's request to delete their data is handled, and practise it once. Today, deletion requests are handled by hand.
- Agree how long old enquiries and appointments are kept, then delete them automatically.
- Sign a short agreement: your clinic decides what is collected, and we handle it only to run your bookings.
- Have a lawyer review the setup, including what India's data protection law asks of you and of us.
This page explains how Aria works in plain words. It is not legal advice and not a claim that Aria meets any law or standard.
This website
- This website uses no cookies and no trackers, and loads nothing from other companies.
- The free pilot form does not store anything. It only fills in a WhatsApp or email message, which you send yourself.
Questions about privacy?
Ask us. We'll go through it with you before any pilot starts.