PhysioAI Logo

Delete EMR Account

Sorry to see you go. This covers EMR workspace deletion (therapist account + all patients, clinical, scheduling, billing, voice artefacts) for com.physioai.emr v1.0.1.

Before you delete — therapists, read this.

  • Export / hand over records first. MCI ~3 years clinical, tax ~8 years billing. Deletion is irreversible and does not transfer your record-keeping duty.
  • Cancel store subscription first. Deleting app/account does not cancel Apple/Google auto-renew.
  • Unpublish public profile (physioai.in/profiles/{slug}) — goes offline on deletion, unpublish first for zero gap.
  • Tell active patients where records go next.

How to request deletion

Option A — In-app (fastest)

  1. Open PhysioAI EMR → Profile / Settings → Delete Account.
  2. Confirm. App calls supabase/functions/delete-account with your Auth JWT.
  3. Function verifies requesting user = userId (403 otherwise), cascades, calls auth.admin.deleteUser.
  4. You get { success: true } or an error to contact support.

Option B — Email (required for full PHI purge until migration lands)

  1. Email support@physioai.in subject “Data Deletion Request — EMR”.
  2. Include: registered email + phone, therapist name / clinic, slug if published, statement “Delete my EMR workspace and all associated patient/clinical/billing data”.
  3. We verify (reply-to + OTP / invoice check), confirm + complete within 30 days (target 7 days).

Known gap (Sept 13 2026): checked-in delete-account function enumerates Prep-Hub tables only, not yet emr_*. Until cascade migration is release-noted, use Option B for any PHI purge — we manually cascade all emr_* + storage.

What gets deleted

  • emr_users, emr_settings, emr_availability, emr_public_profiles (unpublished + purged)
  • emr_patients (hard delete after soft-archive check)
  • emr_soap_notes, emr_assessments, emr_protocols, emr_protocol_assignments, emr_exercise_prescriptions, emr_home_programs, emr_alerts
  • emr_appointments, emr_home_visits
  • emr_invoices, emr_payments, emr_revenue — except anonymised / legal-hold minima
  • emr_communications (bodies purged; suppression hash kept)
  • Voice audio / transcripts / Corti artefacts (30-day queue; saved intake purged on request)
  • Storage objects under your prefix + auth.users + push bindings

Backups/replicas clear on rolling propagation. Deletion certificate + verification hash logged for audit.

What is retained (and why)

KeptWhy / basis
Invoices / tax ledger minima (anonymised where possible), up to 8y FY-endCompanies / Income-tax; DPDP §8(7)
Aggregated / anonymised analytics indefinitelyImprovement; no re-identification
Suppression list (email/phone hash)Prevent re-contact after withdrawal
Litigation-hold materialPaused until hold + 14 days
Deletion certificate (DEL-YYYY-NNNN)Prove compliance

Timeline & rights

Acknowledge + verify → manifest → DPO review → HIGH-priority queue → execute → certificate. Standard SLA 30 days; comms suppression best-effort 72h. Rights (DPDP §§11–14, GDPR, CCPA) via support@physioai.in. Patients: contact your therapist first.

Details: EMR Privacy §11–§13 · EMR Terms · General Delete Account