Skip to main content

Privacy and application permissions

Who this is for​

This guide is for anyone reviewing an application request for professional-information access. Do not enter patient notes, consultation content or identifiable clinical details in these integrations, searches, examples or support messages. No patient-data scope is enabled by this flow.

Start here​

  1. On Choose what this app can access, check the named application and organisation. Decline if either is unexpected or if you no longer have authority there.
  2. Review each requested checkbox. Current labels cover browsing evidence, reading or editing your update preferences, selected update delivery, PD course browsing/details and organisation governance reading. Select only the access you want; reading permission is not permission to generate documents or change another person's choices.
  3. Check Connection expiry. A displayed expiry does not extend source permission, funding or organisation membership beyond their own limits.
  4. Choose I approve only the selected access, then Approve selected access only for the request you reviewed. Decline ends the request without your approval.
  5. Set any alert criteria, timing and destination separately. App consent does not activate an alert.

Your selected interests and criteria remain personal. Employer or vendor funding does not grant access to them or authority to approve on your behalf. An administrator's clinic role does not establish access to your personal context. A service credential is also not personal consent.

What success looks like​

The intended app has only the explicitly selected current access, and its state is visible in application permissions. A permission checkbox, payment or server configuration alone is not evidence that the intended user journey succeeded. No zero-retention claim, security certification or vendor-wide guarantee is established by this guide.

If it does not work​

If Access could not be approved appears, stop and check the request's organisation, current funding and expiry. Do not supply credentials to support or use another person's account. Use Troubleshooting for access errors. For a privacy concern, contact the existing privacy address with a minimal description; do not attach patient records or secrets.

Stop or change your choices​

Use Disconnect application for an existing grant and check its returned state. Saved update choices are retained, but retention does not approve a later reconnection. Pause notifications and manage paid funding independently in Manage and cancel. An uncertain remote disconnect needs status checking before it can be called confirmed.