The Ocean Platform was built from the ground up to ensure patient health data is kept private and secure, using client-side patient encryption technology. All patient data sent to and stored within Ocean is encrypted end-to-end using the industry-standard 256-bit AES, the same technology used for online banking. 

To further guard against any possible breach of personal health information on our Ocean servers, patient data is encrypted using a private key, created by and known only by health clinic administrators. Since encryption keys are kept private and stored locally within each individual clinic, no agent outside of the clinic can ever decrypt or read private patient information. This ensures that even the most trusted staff and technical team members at OceanMD are completely unable to read patient charts or any private health information. 

No. As noted above, OceanMD is committed to keeping patient data secure using the most stringent approaches to data security and privacy. OceanMD never accesses or sells personal information of patients. Furthermore, since all data is fully encrypted, OceanMD cannot access personal health information in a readable format. In this encrypted state, data is meaningless and can not be commoditized or sold to a third party, including the parent company of OceanMD, WELL Health Inc.

OceanMD is not an electronic medical record (EMR) system and not designed to act as a long-term repository of health information. All patient data is stored in encrypted form only for a limited time in order to support patient care. During that time period, only healthcare providers with a secure login and access to the clinic’s unique encryption key can access decrypted patient health information residing in Ocean. Once patient data has been successfully downloaded to the patient chart in the clinic’s EMR, it is routinely deleted from the Ocean Platform. All Ocean data, including client-side encrypted PHI, is stored in our primary storage facility located in Montreal, with additional copies of the data kept in a warm failover disaster recovery facility in Toronto. 

OceanMD provides a secure way for healthcare providers to communicate with their patients. Messages from OceanMD will come from a [email protected] email address unless the clinic has set up their messages to come from their own, customized domain. Many clinics will update the “from name” to their clinic or another custom name of their choice. In that case, the email will appear to come from “Clinic Name” [[email protected]]. If you receive an email from this address, you can feel confident that the content and any links in that message are from your healthcare provider. If you are unsure, please contact your healthcare provider/clinic directly.