Skip to main content
You’re not required to use a company-issued phone or computer. Most of us use our own. That’s fine, with conditions, because your personal device can touch client information. The privacy and security requirements are in Devices, mobile, and texting. This page covers the conduct side.

​
During sessions

Your phone is silenced and out of sight during client sessions, in person and telehealth. The only exception is if you’ve told the client you’re expecting an emergency call. Checking your phone in session tells a client they aren’t the priority.

​
Personal use during work

Reasonable personal use of your phone between sessions is fine. Don’t let it eat the time you’d use for notes.

​
Work apps on personal devices

You may install practice apps (Gmail, Google Drive, the PracticeOS mobile app) on a personal phone or computer only if the device meets the security requirements: a passcode, up-to-date software, encryption, and enrollment in the practice’s mobile management so the work profile can be wiped remotely if the device is lost. Enrollment is required before any client data reaches the device, not after.

​
What never goes on a personal device outside practice apps

  • Client names, notes, or documents saved to the device’s local storage, camera roll, or personal cloud
  • Client conversations in personal texting apps
  • Screenshots of client records
  • Session recordings

​
Recording

Don’t record clients, colleagues, or meetings on any device without explicit consent from everyone involved and, for clients, a signed consent in the record. Utah is a one-party consent state for recording conversations, but our standard is consent from everyone, always.

​
Lost or stolen devices

If a device with practice apps on it is lost or stolen, tell Zack and the practice manager immediately, any hour of the day, so the work profile can be wiped. This is a potential breach; see Breach and incident reporting.

​
Ownership

Data in practice systems belongs to the practice, wherever it’s accessed from. The practice can wipe the work profile from your device when you leave, and will. Your personal data stays yours.