One place, the whole picture
Every data category, every access grant, and every external flow shows in one dashboard, instead of a family having to piece together what's true across several separate screens.
Coming soonHealth-record Organization Assistant
Manage consent and data rights
The person can see exactly what data Doctor holds about them, who has accessed it, and can withdraw consent or request deletion in one place, satisfying their rights under India's DPDP Act.
Works with
What it does
How Doctor handles this
The user opens a dedicated consent and privacy dashboard showing every category of data stored, every third-party integration data has flowed through (like an ABDM fetch), and every family member or caregiver with access. From here they can withdraw a specific consent, request a data export, or request account and data deletion.
A family that has uploaded three years of a father's health documents, granted a sibling caregiver access, and linked an ABHA address rarely has a clear single picture of everything that's now true about that data — what's stored, who's seen it, what's flowed where. Under India's data protection law, that picture is meant to be theirs to see on demand, not something they have to painstakingly piece together.
The consent dashboard is exactly that single picture: every category of data Doctor holds, every integration data has flowed through, and every family member or caregiver with access, all gathered in one place. From here, a person can withdraw a specific consent, request a full export of their data, or request deletion — the mechanism that makes every other capability's promises about consent genuinely real and checkable, not just words sitting in a privacy policy nobody reads.
Where manage consent and data rights happens
Doctor runs this directly on the platforms your customers already use — no separate app for them to install.
- Google Drive
- Adobe Acrobat Reader
- Google Calendar
How it works
Step by step
- 01
See every data category held
Open the dashboard at any time to view exactly what Doctor stores about you or a family member — every document, medication, appointment, and everything else besides that — organised clearly by category for you.
- 02
Review access and data flows
Check every single caregiver or family member with access, alongside any external flow like an ABHA-sourced record pulled in from elsewhere, so nothing about where the data has actually gone is left at all unclear.
- 03
Withdraw a specific consent
Revoke any single consent at all — a caregiver's access, an ABDM linkage — with the same ease it originally took to grant it in the very first place, exactly as India's data protection law requires.
- 04
Request an export or deletion
Ask for a full, machine-readable export of absolutely everything ever held about you here, or simply request full account and complete data deletion instead, with both requests tracked carefully from submission through to full completion.
Why it matters
What you get out of it
Withdrawing consent is genuinely easy
Pulling back a specific permission takes about as much effort as granting it did, meeting the standard India's law sets rather than burying withdrawal several menus deep.
Deletion and export, on request
A full export or a deletion request can be made directly from the dashboard and tracked to completion, rather than requiring an email to someone and an uncertain wait.
The detail
What to know before you rely on it
This capability is pure data-rights infrastructure with no clinical content or judgement inside it at all — but it is the mechanism that makes every other capability's consent claims real and auditable rather than merely stated in a privacy policy somewhere. A family that granted a sibling caregiver access, uploaded years of documents, and linked an ABHA address can see the complete, current state of all three from one place, and can act on any of them directly.
India's DPDP Act requires that consent be free, specific, informed, and unambiguous, and — critically — as easy to withdraw as it was to give in the first place. A withdrawal option buried three menus deep would itself be a compliance gap, not simply an inconvenient design choice, which is why this dashboard exists as a single destination for every consent-related action. Processing a family member's data, particularly a minor's or a dependent's, requires verifiable guardian consent captured at the point a profile is created.
A confirmed personal-data breach involving health information carries a mandatory disclosure obligation to India's Data Protection Board within 72 hours, plus direct notice to every affected person, and a business handling health data at this volume is likely to be treated as a Significant Data Fiduciary — meaning an India-based Data Protection Officer and periodic Data Protection Impact Assessments are structural requirements. This dashboard is built as the operational home for demonstrating that readiness on an ongoing basis.
Industry use cases
Where this earns its keep
2 industries where Doctor applies this directly.
Doctor's data-rights and consent-dashboard patterns are directly relevant as a reference for how a bank or NBFC's own staff-wellness benefit could be positioned, and the DPDP consent-dashboard capability doubles as a template pattern financial-data products in the same suite could study, but Doctor itself does not touch financial data.
An HR team at a mid-sized NBFC offers Doctor as a voluntary employee benefit so staff can organize their own family's health records privately; the bank has no visibility into any employee's records, and the connection to the finance industry begins and ends with it being offered as a wellness perk.
See the banking and finance playbookThis is Doctor's primary, direct-fit industry — it organizes records, tracks medications and appointments, and prepares clinician questions for individuals and families actively managing ongoing health needs.
A person managing a parent's post-hospitalization care uploads the discharge summary, several follow-up lab reports, and the current medication list into one family profile, sets reminders for each medication's timing, and generates a visit brief ahead of the follow-up appointment so the family doesn't have to recall everything from memory in the waiting room.
See the health and wellness playbookMore from Doctor
Everything else it handles
Build a chronological health timeline
The person sees every report, prescription, and visit they've uploaded laid out in date order instead of as a loose pile of files.
Learn moreCapture records from a photo
The person adds a paper prescription or report to their record in seconds by taking a photo, instead of typing it in by hand.
Learn moreManage records for family members
One person — often a caregiver — can organize records for their parents, children, or in-laws separately, without mixing up whose test is whose.
Learn moreGrant and revoke caregiver access
A person managing an elderly parent's records can invite a sibling to view or help, and can cut off that access instantly if circumstances change.
Learn moreExtract structured data from lab reports
The person can see a lab report's parameter names, values, units, and reference ranges as clean text instead of squinting at a scanned PDF.
Learn moreChart the same test over time
The person can see how one specific lab value has moved across multiple visits without manually flipping between old reports.
Learn moreQuestions
Straight answers.
If I withdraw my sibling's caregiver access here, does that take effect immediately?
Yes — withdrawing a specific consent, including a caregiver's access grant, is designed to work with the same ease as granting it, and takes effect right away rather than after any noticeable delay at all, ever. This directly follows India's data protection law, which requires withdrawal to be just as straightforward as giving consent was in the very first place.
Can I request a copy of absolutely everything Doctor holds about my father?
Yes — you can request a full, machine-readable export of every single category of data held about him, and that request is tracked carefully from submission through to when it's eventually fulfilled in full. This is a right under India's DPDP Act, and the dashboard exists specifically to make exercising it straightforward, rather than requiring some separate, uncertain channel elsewhere.
If I request deletion of my father's data, is everything removed immediately, including old records?
Deletion requests are reconciled against any legal minimum retention period that might apply to health records, so the request may follow a documented exception path rather than an instant, blanket removal happening in every single case at once. The dashboard tracks the request's status so you can see exactly where it currently stands, rather than being left uncertain about whether it went through.
Does this dashboard tell me anything about my father's health, or just about his data?
Just his data — this capability has no clinical content or judgement in it whatsoever; it exists purely to show what's stored, who has access, and what's flowed where, and to let you act directly on any of that. Anything about his actual health stays governed by every other capability's own boundary, none of which this dashboard ever changes or touches in any way at all.
The rest of your stack
It plugs into what you already run.
Doctor connects to your tools
No rip-and-replace — manage consent and data rights works alongside the systems already running your business.
- Dropbox
- Google Sheets
- Google Forms
- Gmail
- Telegram
Coming soon