Phone gallery and patient photos: keep them separate
Quick facts
- Risk
- A patient photo in the personal gallery goes up to the cloud, shows up in a shared album and is seen by anyone who picks up the device.
- Separate
- A locked folder or clinical app, sync turned off and controlled backup.
- Routine
- Move it to the patient record the same day and delete it from the gallery and the trash.
- Incident
- A leaked photo requires notifying the patient and keeping a record, under the LGPD (Brazil's data protection law).
Almost every professional who starts photographing patients with a phone follows the same path: take the photo with the camera app, it lands in the gallery, and the gallery is also where the dinner photo, the kid's photo and the dog's photo live. Within weeks, the "Recents" folder mixes patient records with personal life. Months later, the family album shows a patient's face on the living room TV.
This page explains why that mix is a problem, how to separate things and what to do when something goes wrong. It does not replace legal advice, but it organizes the reasoning for anyone who photographs as part of their routine. For the big picture, see consent and LGPD for photos. The legal reference is Brazilian: the LGPD (General Data Protection Law) applies in Brazil.
Why is the personal gallery a problem?
A photo of a face is personal data and, being related to health, sensitive personal data under the LGPD. Whoever holds that data must protect it. The phone's standard gallery, however, was designed for the opposite: easy access and sharing. The most common risks:
- Automatic sync with a personal cloud, which stores the photo outside your control and leaves it accessible on other devices tied to the account.
- Shared albums and memories, which suggest photos and display them on screens and widgets.
- A lent or lost device, opened by a relative, a child or whoever finds it.
- Selecting by mistake, when sharing a set of weekend photos and accidentally sending a clinical photo.
- A restored backup on a new device, which brings back photos you had already deleted.
- A trash folder that keeps the deleted photo for days or weeks.
How do I separate clinical photos?
There is no single solution, but the principle is simple: patient photos stay in a separate environment, with restricted access, and leave the personal environment the same day.
| Strategy | How it works | Caution |
|---|---|---|
| Dedicated clinical app | The photo is taken inside the app and never goes to the gallery | Check where the app stores it and what it does with the image |
| System-protected folder | Hidden or biometric-locked album | Check whether the folder syncs with the cloud |
| Clinic-only device | A phone only for clinical photos, with no personal accounts | Control who uses it and what happens if it is lost |
| Camera plus quick transfer | The photo goes straight to the patient record and is deleted | Requires daily discipline |
More on where to store them in storing patient photos, cloud for patient photos and backing up clinical photos. To choose a tool, see photo app for an aesthetic clinic.
What about automatic backup?
A phone's automatic backup is convenient and indiscriminate: it copies everything. That includes clinical photos, in a place you may not control. If the account is personal, the patient's photo sits in the same account as your email and your family photos. Assess whether it is worth keeping backup on for that album or whether clinical photos should follow a separate flow, with a secure copy in an encrypted location and restricted access.
Remember that the patient's consent covers the record in the patient file, not storage in an uncontrolled personal cloud. Ideally the clinic has a clear policy, with a person responsible, and the patient can find out where their images are.
What should I do if a photo went to the wrong place?
Incidents happen even in well-organized clinics. What sets them apart is the response. In broad terms:
- Contain: remove access, delete the image from the wrong place, end the sharing.
- Record: note what happened, when, who had access and for how long.
- Assess the risk: does the image identify the patient? Who saw it? Could it cause harm?
- Notify: depending on the risk and the rules, inform the patient and, when required, the competent authority.
- Fix the process: adjust the workflow so it does not happen again.
The concept of a security incident and the LGPD obligations should be confirmed with legal advice, as they may vary by case. The conversation with the patient follows the spirit of telling the patient about a complication: honesty, calm and no downplaying.
What if the patient asks for their photo?
The patient may ask for a copy or deletion of their own image. The process works best when the photos are in one place. If they are scattered across the gallery, the cloud and the messenger, handling the request turns into a hunt. Today's organization is tomorrow's response. For keeping photos in the patient record, see retaining photos in the patient record.
How does Harmy fit in?
Use the example patient, a fictional person, to practice the workflow without creating real patient photos in the gallery.
Which mistakes should I avoid?
- Leaving clinical photos in the personal gallery for weeks.
- Keeping cloud sync on for the clinical album.
- Sending patient photos through a personal messenger.
- Deleting from the gallery and forgetting the trash and the backup.
- Having no process for handling deletion requests.
- Lending the phone with clinical photos accessible.
The question that simplifies everything: if this phone were lost today, what would show up on the screen? If the answer includes patients' faces, it is time to separate.
Frequently asked questions
Can I leave patient photos in my phone's gallery?
It is risky. The gallery usually syncs with a personal cloud, shows up in shared albums and is seen by anyone who uses or borrows the device. The recommendation is to keep clinical photos in a separate place with restricted access.
Does the phone's cloud store the patient's photo without my noticing?
It can. If automatic sync is on, the photo goes up to the personal account as soon as it is taken. Turn off album sync or use a separate clinical app.
What should I do if a patient's photo ended up in the wrong place?
Remove access, record what happened and assess whether the patient is at risk. You may need to notify the patient and, depending on severity, the authority, under the terms of the LGPD.
Does Harmy save photos to my gallery?
The app keeps sessions in the account history. A photo you take with the phone's camera outside the app can go to the gallery like any photo, so delete it from the device afterward.
Harmy images are illustrative simulations generated by AI from the patient's photo to support the conversation between practitioner and patient. They are not a promise of results. Indication, technique, product and volume are solely the decision of the licensed practitioner. This content is for information only and does not replace a clinical assessment.