Telehealth Privacy and Consent: 8 Questions to Ask Before a Virtual Visit

Why telehealth privacy deserves a checklist

Telehealth can involve video, telephone, secure messages, patient portals, or remote monitoring. Each format may handle information differently. The U.S. Department of Health and Human Services Office for Civil Rights explains that video apps and other remote technologies can create privacy and security risks even when a health care provider uses appropriate safeguards.

Patients do not need to become cybersecurity experts. The useful goal is to know how the appointment will happen, reduce avoidable exposure on your side of the connection, and ask the clinic when something is unclear.

Eight questions to ask before a virtual visit

1. How will the clinic send my visit link? Confirm whether instructions will arrive by portal, email, text, or phone and which sender or number to expect. If a link looks unusual, call the clinic at its published number rather than replying with health or payment information.
2. Which platform or app will we use? Ask whether you need to download anything, create an account, change browser permissions, or review a privacy notice. Use the clinic's approved link rather than moving the conversation to an unverified social or messaging app.
3. What consent or forms are required? Telehealth consent rules can vary by state and service. HHS notes that a clinic may obtain and document consent before the first appointment or during check-in. Complete only the forms the clinic identifies through a verified channel.
4. Who will be present? Ask whether a trainee, interpreter, caregiver, technology assistant, or another person will join. At the start, state who is in your space and ask the care team to identify everyone on their side.
5. Will any part of the visit be recorded? Do not assume recording is permitted. Ask about clinic policy, applicable consent, where a recording would be stored, who could access it, and alternatives such as a written summary.
6. How should I share documents, photos, or readings? Use the patient portal or another clinic-approved method. Confirm what is needed, when to send it, and whether the clinician received it. Avoid sending sensitive information to an unfamiliar address.
7. What if I cannot speak privately? Tell the care team. Ask whether headphones, chat, a different location, a support person, a partial private conversation, or rescheduling is appropriate. A safety concern at home may require a different plan.
8. What happens if privacy or technology fails? Confirm the clinic's verified phone number, your callback number, who will call, and whether the visit can continue in another format. Not every service can safely or appropriately switch to audio-only care.

Prepare your space and device

HHS telehealth guidance for patients recommends a quiet location, a personal device when possible, a password-protected home network, and avoiding public Wi-Fi when sharing health information. Position the screen so passersby cannot see it. Headphones can reduce what other people hear, although they cannot make a shared space completely private.

Install operating-system, browser, and telehealth-app updates before the visit when feasible. Lock the device with a passcode, close unrelated apps, and turn off voice-activated smart speakers or home devices that could overhear the conversation. Sign in early enough to test the camera and microphone without rushing.

Identify everyone and set boundaries at the start

Begin by confirming your name, physical location, callback number, and the people in the room. Ask the clinician to introduce everyone present on the other side. Your actual location matters for emergency planning and may affect whether the clinician can provide care. If you will be away from home, read our guide to telehealth while traveling.

If a family member, caregiver, or interpreter is helping, decide what you are comfortable discussing in front of that person. You can ask whether part of the conversation can happen privately. The clinic may also need to explain how authorization or interpretation services apply.

Use secure channels after the appointment

Before ending the visit, ask how you will receive the visit summary, medication instructions, laboratory orders, referrals, or follow-up plan. HHS encourages patients to request a summary when they need help remembering next steps. Use the established portal or clinic contact method for later questions.

A privacy checklist does not guarantee that a device, network, or platform will never have a problem. If you receive an unexpected request for a password, one-time code, identification, or payment, pause and verify it through the clinic's published contact information. For connection planning, see our guide to telehealth connection problems and backup plans.

Privacy is important, but emergencies come first

Do not wait for a private room, a telehealth link, or a routine appointment during an emergency. In the United States, call 911 for immediate danger or a medical emergency and give your actual location. For suicidal crisis, mental-health crisis, or emotional distress, call or text 988 or use the 988 Lifeline chat.

Common telehealth privacy questions