AI Privacy for Healthcare

MyYaad is an AI privacy tool used by anyone who handles sensitive information — and clinicians have some of the strictest obligations. Healthcare professionals are increasingly using AI to draft clinical notes, summarise patient histories, and support diagnostic reasoning. Patient data is protected by HIPAA, GDPR, and medical confidentiality obligations. This page covers how MyYaad applies to clinical work specifically. See who else uses MyYaad →

MyYaad swaps two kinds of details: the ones you save in your vault — names, addresses, companies, anything you choose — and the ones it detects automatically: email addresses, phone numbers (UK, US and international), credit-card numbers, bank IBANs, API keys and similar secrets, US Social Security, ITIN and EIN numbers, UK National Insurance and UTR numbers that pass their checks, Indian Aadhaar and PAN numbers and Canadian SINs, plus national ID numbers from the UAE, Ghana, Italy, Switzerland, Belgium, Spain, Brazil, Argentina, Chile, Mexico, Pakistan, Malaysia, Singapore, South Korea, Sweden, Ireland, Sri Lanka and China. Some details, such as dates of birth, passport numbers and postcodes, it notices but sends as you typed them. Save them in your vault to swap them.

See It in Action

Without MyYaad

Summarise the treatment history for Margaret Chen. She was diagnosed with Type 2 diabetes in 2018 and started on metformin 500mg.

With MyYaad

Summarise the treatment history for Lynela Vanceston. She was diagnosed with Type 2 diabetes in 2018 and started on metformin 500mg.

With Margaret Chen saved in the vault.

The AI receives the version with stand-ins. The details MyYaad swapped stay on your device.

The HIPAA and PHI Challenge

HIPAA (Health Insurance Portability and Accountability Act) strictly regulates the use and disclosure of Protected Health Information. PHI includes patient names, dates of birth, medical record numbers, diagnoses, treatment plans, and any other individually identifiable health information. When a clinician types patient details into an AI chatbot, that data is transmitted to a third-party server — constituting a potential HIPAA violation. Most AI providers do not have Business Associate Agreements (BAAs) in place, and even those that do (like some enterprise ChatGPT deployments) still involve data leaving the healthcare organisation's control. In the UK and EU, similar protections apply under GDPR and the common law duty of medical confidentiality. The Caldicott Principles require that patient-identifiable information is only shared when absolutely necessary and with appropriate safeguards.

How MyYaad Swaps Patient Details

In supported prompt and document flows, MyYaad swaps the patient details you save in your vault and the ones it detects automatically: - Patient names are swapped for different realistic names when you save them in your vault - US Social Security numbers, and UK National Insurance numbers that pass their check, are detected and swapped as you type - NHS numbers and medical record numbers: save them in your vault to swap them - Email addresses and phone numbers are detected and swapped; save addresses in your vault - Dates of birth: MyYaad notices dates, but it does not swap them yet — they are sent as you typed them. Save specific dates in your vault to swap them today. - Prescription dosages and medication names can be added as vault entries for swapping — they aren't auto-detected from free text The AI receives a clinically coherent prompt with the medical context it needs, with stand-ins for the details MyYaad swaps. Anything MyYaad does not swap is sent as typed, so check the pre-send preview. When the response comes back, MyYaad restores the original values so the clinician sees the output with the real patient details. Each AI provider sees different stand-ins. If a clinician uses ChatGPT for note drafting and Claude for differential diagnosis support, the stand-ins the two providers see do not match each other.

Common Healthcare AI Use Cases

Healthcare professionals use AI across a wide range of clinical and administrative tasks: - Drafting clinical notes and discharge summaries - Summarising patient histories for referrals - Supporting differential diagnosis with symptom analysis - Generating patient-facing educational materials - Analysing lab results and imaging reports - Drafting letters to GPs, insurers, or specialists - Coding and billing documentation Each of these scenarios involves PHI. MyYaad can swap the patient details you save and the ones it detects automatically before a supported prompt is sent.

Clinical Document Support

Healthcare workflows often involve clinical documents — lab reports, discharge summaries, referral letters. Supported formats: PDF, Word and Excel: Use as Context · Excel (.xlsx): AI-safe copy. MyYaad reads clinical documents on the clinician's device and swaps the details that are saved and the ones it detects automatically before the content is used with an AI service. Review what MyYaad will send first. Files attached directly in a chatbot are not protected.

Risk Comparison

Scenario	Without MyYaad	With MyYaad
Patient name in prompt	Real name sent to AI — potential HIPAA violation	Stand-in sent for a patient name saved in the vault; unsaved names are sent as typed
Clinical document as context	Entire patient record uploaded to AI	Text with stand-ins sent — original file stays on device
AI provider breach	Real PHI exposed — HIPAA breach notification required	Stand-ins for the swapped details; other details as typed
Multi-provider use	Same patient data visible to all AI providers	Each provider sees different stand-ins
Pre-send review	No visibility of what's being sent to AI	Preview panel shows the substitutions before send

What MyYaad does and doesn't protect

MyYaad swaps details in what you type and in the documents you bring in through its Documents page — that's the channel it's built for. It does not protect files attached directly in a chatbot. It can't retract what an AI provider already remembers about a patient from past chats, and it doesn't cover data a connected integration hands the model directly. Used inside its scope, the patient details MyYaad swaps are not in the prompts you send. It's a tool that reduces exposure — not a HIPAA certification. Your organisation's own HIPAA / data-protection review still applies.

See the full threat-model boundary →

Start protecting patient data today

MyYaad is free, runs on your computer, and works with ChatGPT, Claude, Gemini, DeepSeek, Grok and Perplexity. The app needs no account.

Download MyYaad Free

MyYaad reduces exposure; it is not a compliance certification or a substitute for your organisation's legal and security review.