Teletherapy privacy when you use a work laptop or shared workspace

Identify who controls the device and account

HHS recommends a personal device where possible and advises avoiding workplace-linked devices or networks for telehealth because workplace systems may expose activity. That guidance is a reason to examine your setup, not a claim that every employer observes the same information.

List the device you intend to use and the account used for the patient portal, email, and calendar. If a work-managed browser automatically signs you into a work account, consider whether you can use a personal device and account instead. Do not change or bypass employer security controls; ask the provider for another workable appointment arrangement if needed.

Sources: HHS: Telehealth Privacy and Security Tips for Patients

Check where appointment information will appear

Look at the contact details already on file with the practice. Ask which channels it uses for confirmations, forms, statements, and follow-up messages. Request a reasonable alternative contact method if an existing channel is unsuitable, and ask how to confirm the update. HHS describes alternative communication requests and safeguards for provider email.

Review the settings of any calendar where you plan to record the appointment. Decide what information you want in the event title and whether other people can view its details. This is a settings check, not a guarantee of secrecy. Keep the video link and clinical documents in the channel the provider recommends instead of forwarding them broadly.

Sources: HHS: Provider email and alternative patient communications

Check the room as carefully as the screen

A closed door does not answer every privacy question. Consider whether colleagues, household members, or visitors can overhear you and whether the camera shows confidential workplace material. HHS recommends a private setting, headphones when helpful, and attention to nearby devices that may record or respond to voices.

Choose a connection you can reasonably rely on, and ask the provider for help if you only have public internet access. Test the setup before the appointment rather than discovering the problem after a meeting ends. If a room reservation is uncertain, identify another location and ask the practice how to handle a last-minute change.

Sources: HHS: Telehealth Privacy and Security Tips for Patients; HHS: Protecting telehealth data and privacy

Make a short start and finish routine

Before joining, close unrelated work windows, check camera and microphone permissions, and confirm that you opened the link from the expected provider. If a message or link looks suspicious, use the provider’s known contact route to verify it. HHS recommends security updates, screen locks, and stronger account protection where available.

After the visit, sign out of the portal when appropriate for your device, put written notes somewhere private, and check where any downloaded documents were saved. If the appointment setup did not let you speak freely, tell the provider and plan a change for next time. These steps reduce avoidable exposure; they do not certify a system’s security.

Sources: HHS: Telehealth Privacy and Security Tips for Patients; HHS: Protecting telehealth data and privacy

Common questions