How your health data is shared

How IndiaMedica shares your medical reports: secure upload, your consent for each hospital, use only for opinions and estimates, and deletion on request.

Infographic

By Nikhil Sharma, Founder · Updated · How we write and check

Your reports are shared only with the hospitals you agree to and only to obtain opinions and estimates. You send files through a secure route, never plain email. The case manager passes them to the hospitals you approve. You can ask for your data to be deleted. India’s Digital Personal Data Protection Act 2023 sets out your rights.

IndiaMedicaHow your health data is shared
  1. 01You request reviewYou submit the free case review form with basic details.
  2. 02Secure upload linkThe case manager lists the reports needed and sends a secure way to share them.
  3. 03You choose hospitalsReports go only to hospitals you agree to, for opinions and estimates.
  4. 04Hospitals reviewSpecialists read the reports and send written opinions and estimates.
  5. 05Treatment and recordsIf you go ahead, the treating hospital holds your clinical records.
  6. 06Deletion on requestAsk IndiaMedica to delete your data at any time.
A six-step flow showing how medical reports move from the patient through a secure link to chosen hospitals and how deletion can be requested.

Who sees your reports?

IndiaMedica states that reports are shared only with hospitals you agree to and only to get opinions and estimates. You decide which hospitals. If you do not want a hospital to see your case, say so and it will not be sent there.

How should files be sent?

The case manager replies with a list of the reports, scans and images the specialists need, plus a secure way to send them. IndiaMedica’s planning page warns: do not email medical files to anyone without encryption. Scan images are often large, so a secure upload link is also more practical.

What rights does Indian law give you?

The Digital Personal Data Protection Act was enacted on 11 August 2023, and its Rules were notified on 14 November 2025 with phased compliance. A PIB summary explains that a data fiduciary must give a clear consent notice explaining the purpose of collection. You can withdraw consent.

  • Access: ask for a copy of your personal data.
  • Correction: ask for inaccurate or incomplete data to be corrected.
  • Erasure: ask for data to be removed in certain situations.
  • Nomination: appoint someone to exercise your rights for you.
  • Grievance: complain online if your rights are not respected.

What happens if you go ahead with treatment?

The treating hospital creates and keeps your clinical records. Ask it for copies of everything at discharge, including images. Share them with your local doctor so follow-up care has the full picture.

Your consent comes first

If anyone asks you to send reports to a hospital you have not approved, you can refuse. Consent can be withdrawn.

Questions people ask

Can I send reports by WhatsApp?

It is safer to use the secure route your case manager sends. Messaging apps spread copies across phones and backups that are hard to delete later. If you have already sent files that way, tell the case manager and ask how to proceed.

How do I ask for my data to be deleted?

Write to IndiaMedica at hello@indiamedica.com and ask for deletion. Name the case or the email address you used. Hospitals that treated you hold their own medical records under their own rules, so contact them separately.

Sources

General information, not medical or legal advice. Rules change: confirm with the official source. How we write and check.

More infographics

The patient journey in seven steps

From sharing reports to follow-up at home: the seven stages of treatment in India with IndiaMedica and who does what at each one.

How the e-Medical visa works

The e-Medical visa step by step: the hospital letter, the online application window, the ETA by email and biometrics on arrival in India.

How the e-Medical Attendant visa works

Who can travel with a patient to India, how many attendants are allowed, what each one uploads and how their visa links to the patient’s.

Living-donor transplant approval path

How a foreign patient’s living-donor transplant is approved in India: near-relative donor, embassy Form 21, documents and authorisation committee.

NABH and JCI compared

NABH and JCI side by side: who runs each, scope, how long accreditation lasts, how hospitals are assessed and how a patient can check status.

How a second opinion from India works

Getting a written specialist opinion from Indian hospitals without travelling first: reports to gather, consent, review and what you receive back.

Free Case Review

Send us your reports. We’ll do the rest.

A case manager reviews your reports, shares them with suitable accredited hospitals and comes back with treatment options, the specialists involved and written estimates — free, with no obligation.

Start your case review