Skip to main content

Legal

Account deletion

How to delete your DoctorOS account — from inside the app or by written request — and exactly what happens to your data. Aligned with Bangladesh PDP Act 2023 §16, Apple App Store Guideline 5.1.1(v), and Google Play's account-deletion policy.

Delete from inside the app

  1. Sign in to DoctorOS as the clinic owner.
  2. Open Settings → Account → Account actions → Delete account.
  3. Re-enter your password and type your clinic slug to confirm — deletion is scheduled immediately and every staff member is signed out.
  4. Patients: open the patient portal → Account → Delete account, and confirm with the code sent to your phone.

Only the clinic owner can delete the clinic account (it removes the whole clinic, including every staff sign-in). A staff member who wants their own profile removed should ask the owner. A patient portal account is separate: the patient deletes it themselves from the portal, and doing so removes their portal login, their linked clinic profiles and every device — not the clinic’s medical record.

Delete by written request

No access to the app? Email privacy@doctoros.work from the owner email address on the account, with your shop's web address (for example your-shop.doctoros.work). We verify the request with you and honor it within 30 days (PDP Act 2023 §16).

What gets deleted

  • The clinic profile, chambers, public booking page and custom-domain bindings
  • Every staff account, sign-in session and paired device
  • Patient records, visits, prescriptions, lab orders and results, appointments and payments
  • Uploaded files (prescription PDFs, lab reports, letterheads, patient documents)

What the law makes us keep

  • A patient who deletes only their PORTAL account keeps their medical record at the clinic — visits, prescriptions and lab results belong to the treating clinic as its regulated medical record, and are removed only when the clinic itself is deleted or the clinic removes them
  • The audit archive — kept for legal-compliance evidence, isolated from any live system

The 30-day recovery window

Deletion is scheduled, not instant: every staff member is signed out immediately, and all data is permanently erased after 30 days. Inside that window you can undo it yourself — sign back in as the owner and choose Settings → Account → Cancel deletion (a patient signs back in to the portal and cancels there). After the window closes, recovery is impossible.

Contact

Data Protection Officer: privacy@doctoros.work