Security, privacy and compliance
How we protect patients, professionals and partners: our registrations, the frameworks we design against, and how to reach us about data, security or grievances.
Compliance-first, privacy by design
Every feature on Caremeez is designed within the framework of Indian Medical Council guidelines and HIPAA privacy principles. This page summarises how we protect patients, professionals and partners. For the full legal terms, see the Privacy Policy and Terms of Service.
Data minimisation
We collect only what is required to deliver and improve the service: account details, consultation metadata and payment records required for compliance. Health content shared in a consultation stays between the patient and the professional.
Encryption in transit
All traffic between apps, the website and our backend uses transport-layer encryption. Public pages are served over HTTPS only.
Role-based access
Access inside Caremeez is limited by role and need. Database security rules enforce who can read and write which records.
Clinical governance
Professionals are verified before they can consult, must practise within Indian Medical Council and telemedicine guidelines, and are expected to refer patients to in-person or emergency care when tele-consultation is not appropriate.
Payment security
Payments are processed by payment-gateway partners. Wallet deductions are itemised and visible to the patient; a 2% share of each consultation covers gateway charges.
Cloud infrastructure
The platform runs on Google Cloud infrastructure through Firebase services, benefiting from Google's physical and network security controls.
Frameworks we design against
Indian Medical Council guidelines and Telemedicine Practice Guidelines
Consultation flows, professional conduct rules and content standards are designed to follow the Indian Medical Council's professional conduct regulations and the Telemedicine Practice Guidelines issued in 2020.
HIPAA privacy principles
Although HIPAA is a United States law, we adopt its privacy and security principles, including minimum necessary access, safeguards for health information and accountability, as a design baseline.
Ayushman Bharat Digital Mission
Visiwell Solutions is registered as a Digital Health Facility in the Healthcare Facility Registry (HFR IN0611142540, verified 25 June 2025), aligning Caremeez with India's national digital health ecosystem.
Digital Personal Data Protection Act, 2023
We are aligning our consent, purpose-limitation, retention and grievance processes with India's Digital Personal Data Protection Act, 2023 as its rules come into force.
What you control
- Know before you connect. Rate, experience, verification status and languages are shown on every profile.
- Your data, your requests. Request access to, correction of, or deletion of your account data by emailing us.
- No hidden tracking on this website. This site stores only your theme preference in your browser and does not run third-party advertising trackers.
- Emergency guidance. Tele-consultation is not for emergencies. In an emergency, contact the nearest hospital or local emergency services.
What we expect and provide
- Verification. Credentials are reviewed before a professional appears to patients.
- Conduct. Professionals agree to our conduct and privacy requirements, including in the in-app network and in published content.
- Programme data. Partner reporting is aggregated; individual health content is not shared with partners.
- Documentation. Registrations and certificates are published on the Company Profile page.
Grievance redressal and security reporting
We aim to acknowledge every privacy, security or service grievance within 24 hours and resolve it as quickly as the issue allows.