Everyone stays informed
A sibling in another city can check their father's timeline and recent reports without needing a shared login or a phone call every time something new is filed.
Coming soonHealth-record Organization Assistant
Grant and revoke caregiver access
A person managing an elderly parent's records can invite a sibling to view or help, and can cut off that access instantly if circumstances change.
Works with
What it does
How Doctor handles this
The profile owner sends an invite (by phone number or a one-time code) to a specific caregiver, choosing exactly what that caregiver can do — view only, or view and upload. Every access grant shows in a simple list with a one-tap revoke button, and every action a caregiver takes is logged under their own name.
An elderly parent's care often falls to whichever sibling lives nearest, while the others want to help but live in a different city and only find out about a hospital visit after it's over. Sharing a login is clumsy and permanent; sharing nothing at all leaves everyone but the primary caregiver in the dark about what's actually happening.
Caregiver access control lets the sibling managing the day-to-day organising send a specific invite to another sibling, choosing exactly what they can do — view the records only, or view and add new ones. Every grant shows in a simple list with a one-tap revoke, and every action a caregiver takes is logged under their own name, so nobody's access to a parent's health records is ever invisible to the person who holds the account.
Where grant and revoke caregiver access happens
Doctor runs this directly on the platforms your customers already use — no separate app for them to install.
- Google Drive
- Adobe Acrobat Reader
- Google Calendar
How it works
Step by step
- 01
Send a specific invite
The profile owner sends an invite by phone number or a one-time code to a named person — a sibling, a spouse — rather than sharing a login that would give away access to everything at once.
- 02
Choose exactly what they can do
Pick view-only access, or view-and-upload access, for that specific person, so a sibling who just wants to stay informed gets a different level of access than one who's also helping file documents day to day.
- 03
Every action logs under their name
Whatever a caregiver views or adds is recorded against their own name in an audit log the profile owner can check at any time, so access to a parent's records never happens invisibly, however small the action.
- 04
Revoke in one tap
The access list shows every current grant with a single revoke button, so a change in circumstances — a falling-out, a caregiver stepping back — can end access immediately, not after some administrative delay nobody wants to wait through.
Why it matters
What you get out of it
Access is never a mystery
The audit log shows exactly who viewed or added what, so a family managing one parent's care together isn't relying on trust alone to know who's been looking at what.
Circumstances can change instantly
Revoking access takes one tap and applies immediately, so a family navigating a difficult period doesn't need to negotiate a technical workaround to cut someone off.
The detail
What to know before you rely on it
The design choice at the heart of this capability is that access is granted per person and per permission level, never as a shared password that hands over everything at once. A profile owner decides, invite by invite, whether a given caregiver can only look or can also add documents — and that decision can be different for each person with access to the same parent's profile, reflecting how families distribute care unevenly across siblings and relatives.
What this capability never does is elevate a caregiver into anything resembling a clinical decision-maker, however trusted or involved they are day to day. Access here means the ability to see or file documents, nothing more — no caregiver, however much access they hold, is given a role in interpreting a report or deciding on care through this feature. That judgement stays with whichever clinician the family sees, regardless of who is doing the organising.
Because an invite travels by SMS and could in principle be intercepted, invite codes are single-use and short-lived, paired with the phone number itself as a second factor. Revocation takes effect immediately across every active session a caregiver might have open, not just on their next login, and the audit log — which reveals who has been monitoring whose health information — is held to the same encryption standard as the records it describes, since knowing who's watching is itself sensitive.
Industry use cases
Where this earns its keep
2 industries where Doctor applies this directly.
Doctor gives an independent worker without employer-provided health benefits a private, no-cost way to organize their own and their family's records and prepare for appointments, since they don't have an HR department doing any of this for them.
A freelance graphic designer uploads a lab report after a routine checkup, and Doctor files it under their profile and lets them draft three questions to ask at the follow-up appointment about a result they didn't understand, without the designer needing to interpret the report themselves or rely on Doctor to explain it.
See the freelancers and consultants playbookThis is Doctor's primary, direct-fit industry — it organizes records, tracks medications and appointments, and prepares clinician questions for individuals and families actively managing ongoing health needs.
A person managing a parent's post-hospitalization care uploads the discharge summary, several follow-up lab reports, and the current medication list into one family profile, sets reminders for each medication's timing, and generates a visit brief ahead of the follow-up appointment so the family doesn't have to recall everything from memory in the waiting room.
See the health and wellness playbookMore from Doctor
Everything else it handles
Build a chronological health timeline
The person sees every report, prescription, and visit they've uploaded laid out in date order instead of as a loose pile of files.
Learn moreCapture records from a photo
The person adds a paper prescription or report to their record in seconds by taking a photo, instead of typing it in by hand.
Learn moreManage records for family members
One person — often a caregiver — can organize records for their parents, children, or in-laws separately, without mixing up whose test is whose.
Learn moreExtract structured data from lab reports
The person can see a lab report's parameter names, values, units, and reference ranges as clean text instead of squinting at a scanned PDF.
Learn moreChart the same test over time
The person can see how one specific lab value has moved across multiple visits without manually flipping between old reports.
Learn moreLog doctor visits and facilities
The person keeps a simple record of when they saw which doctor or facility, for their own reference and to bring to a future visit.
Learn moreQuestions
Straight answers.
Can a caregiver I've given access to make decisions about my father's treatment through the app?
No — access here only ever means the ability to view or add documents to your father's profile, never a role in deciding anything about his care or treatment going forward. Nothing in this feature gives a caregiver, however much access they're granted, any say over treatment, medication, or appointments — those conversations happen with your father's own clinician, entirely outside this app's reach.
If I revoke my brother's access, does he find out immediately, or could he still see things for a while?
Revocation takes effect immediately across every session he might have open, not just the next time he tries to log in, so his access ends the exact moment you tap revoke. He isn't separately notified by the app that access was removed, so if that matters to you personally, it's worth telling him yourself directly, rather than assuming he'll notice on his own.
Can I see exactly what a caregiver has looked at, or only what they've added?
The audit log records both — every view and every upload a caregiver makes shows under their own name with a timestamp, not just the documents they've actively added themselves to the profile. This is specifically so access to a family member's health information is never invisible to the person who holds the account and carries ultimate responsibility for what happens to it.
Is it safe to send an access invite over SMS if my sibling's number might be at risk?
Invite codes are single-use, expire quickly, and are checked against the recipient's phone number as a second factor, which is meaningfully safer than sharing a permanent password with someone over any channel. If you have specific concerns about a particular number's security, it's reasonable to confirm the invite was received correctly before assuming access has actually been set up as intended.
The rest of your stack
It plugs into what you already run.
Doctor connects to your tools
No rip-and-replace — grant and revoke caregiver access works alongside the systems already running your business.
- Dropbox
- Google Sheets
- Google Forms
- Gmail
- Telegram
Coming soon