Keeping patient names private at the front desk

Why are names on a board a problem?

A name on a board, or called across a waiting room, tells strangers, neighbours and colleagues that a particular person is at a particular clinic, and often which doctor they are seeing. Some patients don't mind; others would rather nobody knew, and they rarely say so.

In a smaller town, patients are more likely to be recognised in the waiting room. A clinic that shows names is making that choice for every patient.

What should patients be able to see?

Everything they need to manage their wait, and nothing about anyone else:

• The running token number and the next few numbers.
• Whether the doctor is in, in surgery or on a break.
• OPD timings and notices.
• Directions and how to call reception.

Nothing on a public board or page needs a name, phone number or reason for visit.

What should stay at the desk?

• Patient names and phone numbers.
• Booking messages and payment references.
• The reception panel used to change the token and doctor status, protected so only staff can use it.

Treat the desk phone or tablet like the register: lock it, and don't leave booking messages open on a screen patients can see.

How do you switch from names to tokens?

1. 1Decide how tokens are issued: on arrival, on booking, or both.
2. 2Give every patient their token number at the desk and tell them where to watch for it.
3. 3Call patients by token number only.
4. 4Remove names from any board or screen in the waiting room.
5. 5Keep the name-to-token record at the desk.

The change is easier when patients can see the running token for themselves. Full queue rules: how to run an OPD token queue.

What about phone calls and the waiting room itself?

Names leak in more places than the board. Reception often confirms a patient's name and reason for visit on the phone within earshot of the waiting room, or reads a booking aloud to check it. Each of these can be avoided:

• Confirm bookings by token number or by the last digits of the phone number, rather than reading out names.
• Take calls about a patient's visit away from the waiting area where possible.
• Ask patients to show their token number at the desk instead of saying their name.
• Keep printed lists of the day's patients face down or out of sight.

Front-desk privacy checklist

• No patient names on any board, screen or page that patients can see.
• Patients called by token number only.
• Booking messages and the day's list kept on a locked phone or out of sight.
• The reception panel protected so only staff can change the token or status.
• A clear answer ready for patients who ask what the clinic does with their name and number.

How does DoctorIn handle this?

The DoctorIn token board shows token numbers only, never patient names or personal details. The doctor's status, timings and directions are on the same page. Reception changes the token and status from a PIN-protected panel at /admin.

Bookings travel as a WhatsApp message from the patient's phone to reception, so names and numbers reach the desk and nowhere public. More on the privacy policy and security pages.

Does this make DoctorIn a medical records system?

No. DoctorIn holds no medical records, prescriptions or bills, which also means there is no patient medical data on the token page to protect. It shows the queue and nothing else.