Can RTI Scheduler be used for patient information?

Can I use this RTI Scheduler for patient information?

This independent website at rtischeduler.com.co is a personal task planning tool developed by Raza Mehdi. It is not presented as an approved service for protected health information.

Do not enter patient names, appointment details linked to a patient, diagnoses, treatment notes, insurance information, or other confidential health records. Use the systems approved by your healthcare organization instead.

What does HIPAA cover?

The Health Insurance Portability and Accountability Act, known as HIPAA, and its rules protect certain health information handled by covered entities and business associates. The requirements depend on the organization’s role and the information involved.

A website security statement or an HTTPS connection alone does not establish HIPAA compliance. This page explains the limits of this personal planning tool, rather than claiming healthcare compliance certification.

Does this website offer a Business Associate Agreement?

No Business Associate Agreement, commonly called a BAA, has been established for this tool. Creating an account does not create one or authorize the website to process protected health information.

The current service does not provide a healthcare workspace, patient scheduling permissions, a verified medical record audit trail, or a documented HIPAA safeguards program.

Can I plan general work without patient details?

Use general task names such as Review office checklist or Prepare meeting agenda, provided they contain no confidential patient information. Choose the date, time, priority, and optional preparation detail.

Removing a name alone does not necessarily make a health record anonymous. Avoid combinations of details that could identify a patient.

Where would information entered in a task be stored?

Guest tasks are stored in the browser’s local storage. Account tasks are saved in the WordPress database. The tool does not add encryption to guest storage or task records, and hosting encryption and backup practices have not been confirmed.

Account login helps select the signed in user’s task list. It does not establish all administrative, physical, or technical safeguards needed for a healthcare service.

What should I do if patient information was entered?

Stop adding further confidential information and notify your healthcare organization’s privacy or security contact if its information is involved. Contact the website owner to explain where information may have been submitted and request assistance.

Do not send patient records, passwords, or access tokens in the initial email. Use the relevant page or account email to help locate the concern.

How can I remove submitted tasks or ask about data retention?

Use Delete in the scheduler to remove a task from the current list. Clearing local storage removes guest tasks from that browser but does not remove account tasks.

For account deletion or backup retention questions, contact the owner. Hosting and backup details have not been confirmed, and the website does not promise a healthcare breach response deadline or immediate erasure of every copy.

Could this tool become a healthcare scheduling service later?

A healthcare service would require operational changes and a separate review of applicable obligations and agreements. Publishing this notice does not implement those changes or make the current tool suitable for protected health information.

Who can I contact about a health information concern?

Contact Raza Mehdi about information submitted to this website or questions about its current scope. Do not include confidential patient details in your message.