Compliance

Number Masking for Healthcare Privacy

Edesy number masking lets patients, doctors, pharmacists and delivery staff talk through a virtual number, so neither side sees the other's personal mobile. Sessions can expire after a consult, recording is a per-number choice, and recordings sit in encrypted storage. Edesy does not claim HIPAA compliance and does not sign BAAs. This page is general information, not legal advice.

Number masking at a glance

ShopifyAmazonStripeSlackNotionVercel

What Edesy Provides

Masked numbers both ways

Patient and clinician each call one virtual number and are bridged to the other. Neither personal number is shown.

Sessions that expire

Create a session per consult or order with expiry_minutes (up to 30 days) or max_calls, and end it early through the API when the consult is over.

Recording is your choice

Recording is set per number. Leave it off for numbers that carry clinical conversations unless you have consent and a reason to keep audio.

Encrypted storage, signed links

Recordings are kept in encrypted cloud storage and opened through short-lived signed links, not public URLs.

Access by role

Workspace members have owner, admin or member roles. Give portal and API-key access only to the people who need it.

Signed event webhooks

Call and session events are HMAC-SHA256 signed so your system can verify them before updating a patient record.

What You Need to Do

  1. Step 1 of 4: Decide what you need to keep

    Work out whether you need recordings at all. If not, keep recording off for the number.

  2. Step 2 of 4: Keep identifiers out of metadata

    Use an opaque appointment or order ID as the session reference. Do not put diagnoses or patient names in reference or metadata fields.

  3. Step 3 of 4: Expire sessions after care

    Set an expiry on every session so the masked link stops working once the consult or delivery is done.

  4. Step 4 of 4: Check your own obligations

    Confirm with your counsel which health-data and privacy laws apply to you (for example the DPDP Act in India) and document your consent process.

FAQ

Ready to Protect User Privacy?

Get started on the self-serve portal. Rs 1.50 per minute plus number rental. New accounts get a Rs 20 welcome credit; no card needed to sign up.