Section 6
Consent and withdrawal
We ask for your consent for each purpose separately. Optional purposes are off unless you switch them on, and you can withdraw consent as easily as you gave it.
Last updated: 28 October 2026
Sharing your health records with doctors
A doctor can see your records only while you have an active care relationship with them, or a sharing permission you granted for one of these purposes:
| Purpose | What it allows |
|---|---|
| Direct care | A doctor needs your records to diagnose, treat, prescribe or review current care. |
| Care coordination | Coordinating your care with another treating professional or facility. |
| Second opinion | A second-opinion review of records you select. |
Every sharing permission records its purpose and history, and you can see who has access in the Privacy Centre.
Optional purposes
| Purpose | What it does | Default | If you withdraw |
|---|---|---|---|
| AI-assisted care | Lets a named doctor use AI to draft notes, summaries or transcription from your consultation. Recording needs an on-screen notice and your agreement. | Off. Given separately for each doctor. | That doctor can no longer run AI tasks on your data, their earlier AI outputs are restricted, and a deletion request is recorded for the AI provider (Google Gemini). |
| AI health insights | An AI score and short summary of your own vitals, shown only to you. | Off | No further insights are generated and a deletion request is recorded for the AI provider. |
| Wearable and step sync | Imports step counts from your phone or wearable into your health view. | Off | No further step data is imported. |
| Location (website only) | Shows your area in the website header. Your browser asks only after you switch this on; coordinates are rounded to about 100 m and looked up through our server with OpenStreetMap, without account details. The apps do not collect location. | Off | The website stops reading your location. |
| Push notifications | Appointment, prescription, record-sharing and security alerts sent to your devices through Google Firebase Cloud Messaging. | On (you can switch it off) | Pending non-security pushes are dropped and a deletion request is recorded for Firebase. Security alerts about your account (such as a new sign-in) are still pushed through Firebase and always appear inside the app. |
| Product analytics | Nothing is collected today. No analytics library is installed; the switch exists so nothing can be added without your opt-in. | Off | Nothing is collected. |
Some processing does not depend on these switches because it is needed to run your account or required by law: sign-in and account security, appointment administration, billing for paid services and security audit records. These are described in the privacy notice.
How to withdraw
- Optional purposes: Privacy Centre → Consents and preferences, on the website or in the app. Switch the purpose off.
- A doctor's access: Consent → end the care relationship or withdraw the sharing permission. It takes one step.
- AI-assisted care for a particular doctor: withdraw that doctor's AI-assisted care permission in the same place.
What happens when you withdraw
- Processing for that purpose stops from that moment. Withdrawal does not undo processing that happened before.
- When you withdraw AI consent or push notifications, we stop sending your data to that provider and record a deletion request to it.
- When you end a doctor’s access, they can no longer open your records. Records a doctor already used for your care stay in their clinical record, as the law requires.
- Your choices and their history are kept so we can show what you agreed to and when.
Consent managers
The Act allows consent to be given through a registered Consent Manager. JeevanPatra does not currently integrate with one; you manage consent directly in the Privacy Centre. Sharing through the Ayushman Bharat Digital Mission uses ABDM's own consent flow.