Private clinical camera

EM photo

Photograph an ECG, a wound or a report. EM photo hides faces and personal data, encrypts the picture on your phone and deletes it on a timer. Nothing goes to a cloud.

Google Play soon App Store soon

Flow: capture a photo, hide faces and personal data, encrypt it on the device. The redacted copy is sent to a chat and then deleted from the phone; another redacted copy is kept encrypted on this device only and deleted automatically after 24 hours. No cloud and no network.

How it works

Five steps, all on your phone. Only redacted copies exist after the second one.

  1. 1 · Capture

    Take the photo in EM photo

    Point the camera at the ECG, the wound or the paper. The picture stays inside the app.

  2. 2 · Redact

    Faces and personal data hidden

    Faces are blurred; names, dates of birth and record numbers get solid bars. You can check every box before going on. The unredacted capture is not kept.

  3. 3 · Encrypt

    Locked on the device

    The redacted picture is encrypted on the phone straight away.

  4. 4 · Export or store

    Send it, or keep it for now

    Send the redacted copy to a chat; once sent, it is deleted from the phone. Or keep it encrypted on this phone only.

  5. 5 · Auto-delete

    Gone after 24 hours

    A stored copy is deleted automatically when its 24-hour clock reaches 00:00.

Privacy

Built so that patient data does not travel, and does not stay.

  • On this device only

    Photos are processed and kept on your phone. Nothing is uploaded to a cloud service.

  • No cloud, no network

    Capture, redaction and encryption work offline. A network is used only when you send a picture to a chat.

  • No account

    No sign-up, no login and no profile.

  • Metadata stripped

    Camera model, time taken, GPS location and device ID are removed before a picture is shared.

For clinicians

For the pictures you need a colleague to see now: the clinical content stays sharp, the patient stays anonymous.

  • ECGs

    12-lead printouts and rhythm strips, with the patient label covered.

  • Wounds and skin

    Lacerations, burns and rashes, documented without the patient's face.

  • Reports

    Discharge letters and lab results, with name, date of birth and record number barred.

  • Imaging screens

    An X-ray or CT image on a workstation screen, without the header line that names the patient.

FAQ

Can I download EM photo?

Not yet. The app is in development; the store badges will link to it when it is released. Until then you can try the demo in your browser.

Does anything go to a cloud?

No. Pictures are processed and kept on your phone. The only time a picture leaves the phone is when you send the redacted copy to a chat yourself.

What is hidden in a picture?

Faces, names, dates of birth, record numbers, addresses, phone numbers and barcodes. You see every covered area and can uncover it or add your own box before you share.

What happens to the original photo?

It is not kept. Only redacted copies are stored or shared, and a shared copy is deleted from the phone once it is sent.

How long are pictures kept?

A stored copy is deleted automatically after 24 hours.