Patient list
What clinic staff can see about patients — and what they can't.
The organization's patient list is available to the Owner, Administrator, Secretary, and Nurse. It exists for operations — reaching patients, scheduling, front-desk work.
What's on it
Contact and scheduling information:
- Name and contact details
- Upcoming and past appointments with the organization
- Scheduling-relevant notes
What's not on it
Clinical history. Timeline entries, diagnoses, consultation notes, test results, prescriptions, vitals — none of this is visible from the patient list, regardless of business role.
Clinical content is reached only through the treating doctor's access grant from the patient (created when the patient books with that doctor). A Nurse recording vitals during a visit does so in the context of that visit, not by browsing records.
Why it's split this way
Health data is sensitive, and a front-desk "read patients" permission shouldn't expose it. Keeping the operational patient list and the clinical record on separate permission systems is what makes the model defensible — see Staff and roles.