Why You Should Never Share Medical Records Over Unsecure Email
Emailing a lab report to your specialist feels like the modern thing to do. It is not — it is the digital equivalent of leaving a copy on the bench at reception. Email was designed in 1971, before privacy was a design consideration, and every subsequent addition has been a bolt-on. Personal medical records deserve a channel that was built for privacy, not one that has to be talked into it.
What actually happens when you email a lab report
The attached PDF sits in more places than most people realise:
- Your own Sent folder, on your device and on your email provider's servers.
- Your provider's backups, for years, subject to their retention policy.
- The recipient's Inbox, on their device, on their provider's servers, and in their backups.
- Any group chat, forward, or personal cloud they save it to.
- Any hospital IT system that automatically ingests inbox attachments.
At least six copies of one report, and you have control over one of them. When the visit is over, none of them go away.
The specific risks
- Risk: No end-to-end encryption · Why it matters here: Standard email is encrypted in transit for some hops, but not consistently — and the mailboxes themselves are readable to the provider
- Risk: No revocation · Why it matters here: Once delivered, gone. You cannot take it back.
- Risk: No access log · Why it matters here: You cannot tell whether anyone actually opened it, or whether it was forwarded
- Risk: Weak recipient authentication · Why it matters here: The doctor's email password is often the weakest link
- Risk: No scoping · Why it matters here: The whole report goes, not just the section you meant to share
- Risk: Persistent copies everywhere · Why it matters here: Backups, forwards, cloud syncs — no expiry
What a proper sharing channel does differently
A time-limited, view-only, revocable link through a health record app fixes each of these. The recipient views the document rather than downloading it, the link expires, and you can cut access on the day after the appointment. None of this is unavailable — it is the default in every modern health locker.
If email is the only option
Sometimes a specialist genuinely will not use anything else. If email must be used:
- Password-protect the PDF and send the password by a different channel — an SMS or a phone call, not the same email thread.
- Send only the specific document requested, not the whole record.
- Delete the email from your sent folder after the appointment. It does not eliminate the copies elsewhere, but it removes one of them.
- Never email records to a personal gmail address — insist on the hospital's own email domain.
WhatsApp is not better
A common substitution for email is WhatsApp, on the theory that at least it is end-to-end encrypted. It is — in transit. But the photos land in the recipient's phone gallery, forever, and are backed up to Google Photos or iCloud without you being asked. WhatsApp is a broadcast tool with a chat interface. It is not a medical records channel.
References
Free for 90 days, no card needed. After that, keeping the record costs ₹349 for the year.
General information, not medical advice. Always talk to a qualified doctor about your own care. Where this and your doctor disagree, your doctor is right.