Last updated: April 2026
ProbeScribe is a reporting tool operated on behalf of the clinic that deploys it. The clinic is the Health Information Custodian (or equivalent) responsible for its patients' personal health information; ProbeScribe acts as its agent or electronic service provider.
ProbeScribe stores accession numbers, structured ultrasound findings and measurements, auto-generated report text, staff usernames, and timestamps.
ProbeScribe does not store patient names, dates of birth, medical record numbers, addresses, phone numbers, insurance details, or any other direct patient identifiers. The accession number is the only link between a record in this system and a patient. Only the clinic's PACS or RIS can resolve an accession number back to a specific patient. A compromise of ProbeScribe data on its own would not directly identify any patient.
Under Canadian health privacy law (PHIPA, PIPEDA, HIA, PHIA, FIPPA, Law 25 and provincial equivalents), data that can be re-identified using another reasonably available source is still treated as personal health information. We therefore handle the data in this system as personal health information even though it contains no direct identifiers.
Exam records are retained as long as the clinic's own retention policy requires. On termination, exam data is returned to the clinic or deleted at the clinic's direction.
If we become aware of a breach of security safeguards involving the clinic's data, we will notify the clinic without undue delay so that the clinic can meet its own notification obligations to affected individuals and regulators.
Requests from individuals to access or correct their personal health information must be directed to the clinic that ordered the exam. The clinic holds the link between accession number and patient identity.
Questions about this policy can be sent to privacy@probescribe.com.