Patient Image Security When Using the Simulation
Quick facts
- Patient's question
- Where does my photo go and who sees it?
- Basis
- LGPD (Brazil) and your professional board's rules
- Principle
- Tell the truth, in plain language, and ask for permission
- Caution
- Do not promise absolute security or total confidentiality
"Doctor, where is this photo going to be kept?" The question is legitimate and increasingly common. A face is personal data, and a facial image can be treated as sensitive information. The patient wants to know where the photo is kept, who has access, and whether it might show up somewhere. Answering clearly is part of building trust and complying with the law. This page shows what to say, what to record, and what not to promise.
Why does the patient ask?
Because they have heard about leaks, deepfakes, and misuse of images. Some people are in the public eye, others hide the procedure from family, and others just want to be sure. The question is not distrust of you, it is their own care. Answering transparently reduces anxiety. See explaining privacy to the facial harmonization patient and patient with public exposure.
What should you tell the patient?
Speak in four simple blocks: what the photo is for, where it is processed, who has access, and what they can ask for.
What data is at stake?
A photo of the face is personal data and can be treated as facial biometric data when used for identification. The LGPD (Brazil's General Data Protection Law) requires purpose, necessity, and transparency in processing. In healthcare, patient record rules also apply. In practical terms: use the image only for what the patient authorized, keep it with restricted access, and do not share it without permission. See consent and LGPD for photos.
| Use of the image | Needs specific permission? | Note |
|---|---|---|
| Patient record and follow-up | Generally part of the care | See image consent for the patient record only |
| Simulation with third-party AI | Recommended to inform and obtain acceptance | Record in the patient record |
| Sending to the patient (link or image) | Inform the channel and destination | See sending the simulation by WhatsApp |
| Posting on social media or a website | Yes, specific written permission | See image consent for promotional use |
| Team training or class | Yes, with permission or anonymization | See anonymization |
What should you not promise?
Do not say the image is "100% safe," that "no one will ever see it," or that "it was deleted from everywhere." Say what you do: limited purpose, restricted access, asking for permission. Promising the impossible is risky, because no system is infallible. Also avoid saying the simulation "doesn't use the photo" when it does.
What if the patient refuses?
Respect it. They can accept the care without a simulation, and you lead the consultation with a mirror and an area map. Record the refusal. See patient refuses to authorize the image, patient who refuses to be photographed, and patient asks to delete the photos.
How does Harmy handle the image?
For the conversation with the patient, these are the facts the app lets you state.
This does not replace your obligations as the controller of the patient's data. You must inform, obtain permission, and record it.
What should you record?
Record that the patient was informed of the purpose and destination of the image, whether they agreed (or not), any restrictions they asked for, and the date. See asking the patient for image consent and recording risk communication.
Answering transparently about the image is not bureaucracy, it is part of the trust relationship. Whoever explains well rarely hears a no, and when they do, they know how to respect it.
What can you do in the office to protect images?
Part of security is routine. Use a password and screen lock on the device used to take photos, avoid sharing the clinic's phone, do not send patient photos through personal apps, and delete images that do not need to stay on the device. Define who on the team can access the photos and keep a simple record of that rule.
Train the team not to show one patient's images to another or discuss cases in informal groups. Small slips are the main source of exposure. See training the team in patient communication and consent and LGPD for photos.
Frequently asked questions
Does the patient's photo go to an outside service in the simulation?
In Harmy, the photo is sent to a third-party AI to generate the image, with the professional's acceptance in the app. The patient must be informed beforehand.
Do I need the patient's permission to use the simulation?
It is recommended to inform the patient and obtain permission for the use of the image, under the LGPD (Brazil's data protection law) and your professional board's rules. Record it in the patient record.
What should I say if the patient asks to delete the photo?
Explain what can be deleted and what must be kept because of patient record obligations. See the page on requests to delete photos.
Can I promise the patient that the image is 100% safe?
No. Promise what depends on you: care, limited purpose, and restricted access. No system is infallible.
Harmy images are illustrative simulations generated by AI from the patient's photo to support the conversation between practitioner and patient. They are not a promise of results. Indication, technique, product and volume are solely the decision of the licensed practitioner. This content is for information only and does not replace a clinical assessment.