How to Protect Your Privacy During a Telehealth Appointment at Home

Protecting telehealth privacy at home starts with the room, device and people around you. Use a private space with a closed door, wear headphones, prevent screen notifications, join through the provider's official link and confirm who is on the call before discussing health information. Tell the practitioner if someone else can hear or see you.

Use an updated personal device and a trusted encrypted home network or mobile data rather than public Wi-Fi. Do not record the consultation, invite another person or share documents through an unapproved channel without discussing consent and privacy first.

This article gives general Australian privacy and cyber-safety information, not legal or technical advice. No home setup removes every risk. If you cannot speak safely or privately, ask for another time, another format or an appropriate in-person option.

Key Points

• Choose a private room and check who can overhear from inside and outside the home.
• Use headphones and a neutral camera background.
• Join only through an official provider link or app.
• Use an updated device, strong account protection and trusted internet connection.
• Hide message previews and close unrelated tabs before sharing a screen.
• Identify everyone present and obtain agreement before including another person.
• Do not record without disclosure, consent and consideration of applicable law.
• Log out, secure downloaded files and follow the provider's approved follow-up channel.

Medical Certificates

Choose the Most Private Location Available

A bedroom, study or parked private vehicle can provide more control than a shared kitchen, workplace break room, café or public transport. Close the door and tell household members the consultation should not be interrupted.

Listen for sound leakage. Thin walls, open windows, shared ventilation spaces and smart speakers can expose conversations. Use headphones so the clinician's voice is not broadcast, and speak at a normal low volume that remains clear.

If no room is private, ask the clinic whether a phone call at another time, a local private room or an in-person appointment is appropriate. Do not withhold clinically important information because someone is nearby without telling the practitioner.

Dociva's telehealth services pillar explains the broader model. The recommended telehealth preparation checklist covers clinical notes and technology.

Check What the Camera Reveals

Position the camera against a plain wall or use a carefully tested background feature. Family photographs, mail, school uniforms, medication labels, work documents and views through a window can reveal identities, addresses or routines.

Good lighting helps the clinician assess visible symptoms without forcing you to move through the home. Test the frame before joining. If you need to show a rash or movement, confirm what will be visible and who else is present.

Cover or disable another camera in the room if it is active, including a home security or baby-monitor camera. Avoid conducting a sensitive consultation within view of workplace monitoring.

Verify the Appointment Link and Provider

Use the link supplied through the provider's official portal, confirmed email or SMS. Be cautious if a message asks for unexpected payment, passwords, remote device access or a download from an unofficial store.

Check the sender domain and appointment details without clicking a suspicious link. Contact the clinic through a phone number independently obtained from its official site if uncertain.

The Australian Digital Health Agency's digital health cyber security guidance recommends verifying the healthcare provider before sharing personal information and avoiding unsafe links and networks.

At the start, ask the clinician to identify themselves and expect them to verify your identity. Read telehealth identity verification for what a reasonable process can involve.

Use a Secure Device

Prefer a personal phone, tablet or computer that you control. Install operating-system, browser and app security updates before the appointment. Use a screen lock and avoid shared administrator accounts.

If the device is shared, create a separate user profile where possible. Private-browsing mode can reduce local history but does not secure downloaded files, protect the network or make the consultation anonymous.

Close unrelated applications, especially work systems, messaging, email and cloud drives. Disable notification previews so incoming texts, names or one-time codes do not appear on screen.

The Australian Cyber Security Centre's web conferencing security guidance recommends patched devices, secure configurations and careful selection of conferencing services.

Protect Your Internet Connection

Use a trusted home Wi-Fi network protected by modern encryption and a strong router password, or use mobile data. Avoid free public Wi-Fi for a health consultation where possible.

Change default router administrator credentials, keep router firmware updated and do not share the home network password broadly. A guest network can separate visitors and internet-connected household devices from the device used for healthcare.

If connection quality is poor, privacy can suffer when people move to a public area or repeat sensitive information loudly. Test audio and video first and have a clinic-approved fallback, such as a verified phone number.

Protect the Telehealth Account

Use a unique strong passphrase and multi-factor authentication when offered. Do not share the account with a partner or carer; use formal delegation options if the service supports them.

Never read a one-time code to someone who contacted you unexpectedly. Sign out after the appointment, especially on a shared device, and review recent account activity where available.

Save recovery codes securely, update outdated contact details and report unexpected password resets or appointment changes to the provider.

Book Online Consultation

Know Who Is in the Consultation

Tell the clinician if a partner, parent, child, carer, interpreter, student or another health professional is present. Ask the provider to identify anyone on their side who is not visible.

You can usually ask to speak privately for part of the consultation. A family member can help with history or communication, but their presence should be your informed choice unless a legal or safety exception applies.

Read including a family member in telehealth and telehealth consent and confidentiality.

If another person controls your device, answers for you or refuses to leave, tell the clinician if safe. The practitioner may use a private check-in or recommend another care setting.

Do Not Record Without Agreement

Recording creates a durable copy of sensitive health information and may capture the clinician or another person's information. Australian federal, state and territory surveillance or listening-device laws differ.

Ask before recording and explain why you want it. Written notes, a consultation summary or having an agreed support person present may meet the need with less risk.

The provider should also tell you if its service records or transcribes the consultation and explain purpose, storage, access and choices. Read whether telehealth consultations are recorded.

Share Screens and Documents Carefully

Share one application window rather than the entire screen. Close personal email, banking, messaging and work documents first. Check browser tabs, bookmarks, desktop filenames and notification banners.

Upload referrals, photographs or results through the provider's secure portal or approved method. Confirm the recipient before emailing. Remove unrelated pages and other people's information unless it is clinically necessary and authorised.

Images can contain location and device metadata. Use the provider's instructions and avoid posting clinical photos to social media or a general-purpose public link.

Phone Consultations Need Privacy Too

A telephone appointment avoids camera-background risks but can still be overheard, spoofed or accidentally placed on speaker. Verify the caller, move to a private location and turn off speakerphone unless everyone present is identified and agreed.

Check whether voicemail previews or call logs appear on a shared device. Ask before leaving detailed clinical information in voicemail, and confirm the safest number and time for return calls. A household phone account may expose call metadata even when it does not reveal the conversation.

If the clinician calls from a blocked number, use the clinic's established verification process rather than demanding personal credentials. End an unexpected call and contact the service through its independently verified number if anything feels inconsistent.

Understand How Health Information Is Handled

The OAIC guidance on health service providers explains that telehealth businesses and online health services can be health service providers covered by the Privacy Act, even when they are small businesses.

Ask for the privacy policy and collection notice. They should explain why information is collected, how it is stored, likely disclosures, access rights and complaint pathways.

The OAIC's health information handling guide says providers should tell patients why information is collected, how it is protected and who may receive it. State or territory laws can add requirements.

See Australian privacy laws in digital healthcare for the regulatory overview.

Smart Speakers and Connected Devices

Mute or move voice assistants and smart speakers away from the room. Review whether a television, meeting assistant, transcription tool or browser extension is listening or capturing audio.

Pause home security audio recording where safe and appropriate, and tell the clinician if any system may record the room. Do not install an unapproved automated note-taking bot into the consultation.

Connected toys, gaming headsets and baby monitors can transmit sound. Privacy planning should include the whole room, not only the laptop.

After the Appointment

1. End the call and sign out of the portal.
2. Close the app and lock the device.
3. Store downloaded certificates, referrals or summaries in a protected location.
4. Delete unnecessary duplicate downloads from shared folders.
5. Check that follow-up messages come through the expected provider channel.
6. Do not forward prescriptions or referral tokens to anyone who does not need them.
7. Report unexpected account activity or misdirected documents promptly.
8. Follow the clinical safety plan and arrange in-person care when advised.

When Home Is Not a Safe Place to Talk

If someone may monitor, intimidate or harm you, do not take steps that increase danger. Use a safer device or location only when it is safe to do so. Ask the provider whether it can contact you at a safer time or by a safer method.

Clear browser history or messages only if doing so will not itself create risk. Technology safety in coercive situations is individual; specialist family violence services can help with a tailored plan.

In immediate danger call 000. Tell the clinician your current location at the start of a consultation if urgent escalation may be needed.

What the Provider Should Do Too

Patient steps cannot compensate for an insecure service. The provider should use appropriate systems, authenticate users, restrict workforce access, secure data, manage incidents and maintain a private clinical environment.

Ask whether the clinician is in a private space and what happens if the connection fails. A provider should not pressure you to discuss sensitive information when confidentiality cannot reasonably be maintained.

Dociva's guide to how telehealth platforms protect privacy explains provider-side controls and realistic limitations.

More of Our Services

Using Dociva

Dociva currently uses online processes for sick-leave, carer's leave, study and multi-day medical certificate requests, all subject to independent assessment by an Australian registered medical practitioner. Use your own account, accurate contact details and official channels.

Dociva provides standard and extended consultations, specialist, pathology and radiology referral assessments, and prescription services through telehealth. Apply the privacy steps in this guide whenever booking or attending one of these online services.

Patients considering a supported category can review the available medical certificate requests. No digital process can eliminate every privacy risk, so protect the device, choose a private setting and report unexpected activity promptly.

Frequently Asked Questions (FAQs)