Basis EHR accounts are created by healthcare organizations for their staff. If you are a patient, contact your healthcare provider about your records — Basis EHR stores them on the provider's behalf.
How to request deletion
- Email us from the address on your account. Send a message to privacy@basisehr.com with the subject “Account deletion request”.
- Tell us who you are. Include your full name, the organization you work for, and the email or phone number you sign in with. Do not include patient information.
- Confirm the request. We will reply to verify your identity and confirm with your organization, then process the deletion.
You can also ask your organization's Basis EHR administrator to deactivate your account. Deactivation takes effect immediately and stops all access from the web and the apps.
What happens next
- We acknowledge your request within 5 business days.
- Your access is disabled as soon as the request is verified.
- Data listed below is deleted within 30 days of verification, and removed from backups as they expire on their normal rotation (up to 90 days).
Data we delete
- Your sign-in credentials and account profile (name, email, phone number, profile photo).
- Device registrations and push notification tokens for your phones.
- Your personal preferences and notification settings.
- Personal information about you that is not part of your organization's business or medical records.
Data we keep and why
Some information must be kept even after your account is deleted, because it belongs to your healthcare organization's legal records rather than to your personal account:
| Data | Why it's kept | How long |
|---|---|---|
| Clinical documentation, visit notes, orders and signatures you created | Part of the patient's medical record, which your organization must retain by law | As required by your organization and applicable medical-record laws |
| Audit logs of actions taken in the system | Required for HIPAA security and compliance | At least 6 years |
| Call, SMS, fax and chat records made in the course of patient care or business | Business and care records of your organization | As set by your organization's retention policy |
| Billing, payroll and employment records | Tax, payer and employment-law obligations | As required by law |
Retained records stay linked to your name where the law requires authorship to be preserved, but can no longer be used to sign in. When the retention period ends, they are deleted or de-identified.
Your device
Uninstalling the app stops notifications to that phone but does not delete your account. You can revoke microphone, notification and Bluetooth permissions at any time in your device's settings.
Questions? Contact privacy@basisehr.com.