OfflineSOAP privacy policy

Effective November 12, 2026. This policy covers the OfflineSOAP web app, which runs in your browser at www.patientmd.com. The website policy for www.patientmd.com is at /privacy-policy.html.

The short version

Your recordings, transcripts and notes stay in the browser on your phone or computer. We never receive them. To confirm your account the app sends us your sign-in, a device identifier the browser creates, and the app version. Subscriptions, once they open, are paid through Stripe.

What stays on your device

Audio recordings. Encrypted in the browser's own storage, and deleted 30 days after you export the note, or when you delete the note.
Transcripts and SOAP drafts. Encrypted in the same storage, under a key the browser keeps and will not hand to the page. They stay until you delete them.
Consent records. The wording you read to the patient and the time they agreed, kept with the note.
Settings. Your state, the name you sign notes with, the languages you chose, and the speech and drafting models you downloaded.

The encryption protects notes stored on the device. It does not protect them from someone using your unlocked phone or computer. Clearing this site's data in the browser, or removing the app from your home screen, deletes every note and recording, so export what you need to keep. The app asks the browser to keep its storage, and Settings shows the browser's answer.

A speech model running in your browser writes the transcript. The draft is written in your browser too, by Chrome's built-in model or by a small open model the app downloads from PatientMD's own site. The models come to your device; your visit does not leave it to make the note.

What the app sends us

Only to confirm that your account may use the app:

your PatientMD sign-in or a one-time practice code, and the email you sign in with;
a device identifier the browser creates once (not a hardware identifier) and the name you give the device;
the app version and the platform;
for subscribers, the Stripe checkout session id, so we can confirm the subscription.

We use these to answer whether your account is active and how many devices it uses. We do not use them for advertising or tracking, and we do not sell or share them.

Drafting on our server, for PatientMD client practices only

We have built a second way to draft for RPM client practices of PatientMD: the app would send the transcript text, never the audio, to PatientMD's server, which drafts the note and sends it back. It is switched off. If we turn it on, we will update this policy first, and a transcript would leave the device only when the clinician picks that option for a note. Practices that are not PatientMD clients cannot use it.

Purchases

Practices that are not PatientMD clients will subscribe through Stripe, on Stripe's own pages. Stripe handles payment; we never see your card. Subscriptions are not open yet. When they open, Settings in the app will have a Manage subscription button that opens Stripe's page.

Health information

The clinician using the app is responsible for the patient information in it, as with any tool in their practice. While the app works on the device, that information never reaches us, so we do not hold or process it, and we do not offer a business associate agreement for the app.

Recording consent

Some states require everyone in a conversation to agree before it is recorded. The app uses that all-party wording everywhere, so the same card works in every state.

Deleting your data

On the device: Settings, then Delete all notes and recordings, removes every recording, transcript and note. Clearing this site's data in the browser does the same.
With us: write to support@patientmd.com from the email you sign in with and we delete the device records tied to your account.

Children

OfflineSOAP is for licensed clinicians and is not meant for anyone under 18.

Changes and contact

If this policy changes, the new date appears at the top and the app shows a notice. Questions: support@patientmd.com.