Storing Patient Photos: Where to Keep Them Safely

Patient photos pile up fast. In a year of practice, a small clinic already has hundreds of images, many of them scattered: in the camera roll, in message conversations, on a USB stick, in a computer folder, in a personal cloud. Each copy is one more place to leak, lose or forget to delete.

Storing safely does not require an expensive system. It requires deciding where the photos live, who accesses them and for how long they stay, and then sticking to it.

Why does a patient photo call for care?

An image of the face identifies the person. In a health context, it is part of the care record and may be treated as sensitive data under the LGPD (Brazil's General Data Protection Law). A leak exposes the patient, who had a private aesthetic procedure, and exposes the clinic to complaints, lawsuits and loss of trust.

Beyond the legal risk, there is the clinical one: a lost photo is a before and after that no longer exists. Storing well protects the patient and your work.

Where to store: the options

There is no perfect option. The most common and reasonable combination is one protected main location plus a backup (see backing up clinical photos). On the cloud, read cloud for patient photos.

How do I organize folders?

A simple, repeatable structure prevents lost photos and makes deletion easier when needed.

1. One folder per patient, with a code or number instead of the full name, when possible.
2. Inside it, one subfolder per visit date.
3. Standardized file names with date, view and phase (before, follow-up), as described in naming clinical photo files.
4. A separate folder for anything with authorization for publication, so it is never mixed with what belongs only to the patient record.

What protections are basic?

Two-step authentication, where available, greatly reduces the risk of a leaked password opening everything.

What about the team?

Many leaks happen through carelessness, not intrusion: the receptionist who sends the photo to the wrong group, the professional who leaves the phone unlocked, the intern who takes the photo home. Set simple, written rules:

• who may photograph and who may access;
• where the photo must be placed right after the shot;
• what to do with the file on the phone after transferring it;
• what happens when someone leaves the clinic (revoke access the same day).

See also patient photo on personal WhatsApp and phone gallery and patient photos.

How long should I keep them?

The period depends on the nature of the record. A photo that is part of the patient record follows the record's retention period, according to the rules of your professional council and current legislation in Brazil, which can change. A publicity photo has a different logic: it depends on the authorization and can be revoked. Read retaining photos in the patient record and separate consent for publication.

What should I do when the patient asks to delete?

There is a balance between the patient's right and the obligation to keep the record. The path is in patient asks to delete the photo. What helps here is knowing in advance where all the copies are: without that map, nothing can be safely deleted.

What if the phone is the professional's personal one?

It is common for the professional to photograph with their own phone. When that happens, a clear agreement is worthwhile: the photo is transferred to the clinic's location the same day and deleted from the device and its trash right afterward. Turn off automatic gallery sync to the personal cloud before starting to photograph patients, or use a camera app that stores images in its own folder, outside the gallery.

If the device is replaced, sold or repaired, confirm that no patient photo remained on it. A phone that leaves the clinic with photos inside is a leak waiting to happen.

Storage and Harmy

Harmy keeps the session history by patient inside the app, with search by name, so you can resume the projection and add the actual result. It does not replace the clinic's official photo archive. The photo is sent to a third-party AI to generate the image, with the professional's acceptance in the app, and the projection is an illustrative simulation, not a promise of results.

Summary for the routine

Decide on one main location, protect it with a password and encryption, organize it in folders by patient and date, limit access, make backups and define the retention period. Review every six months. The cost is small compared to what a leak causes.