What leaves your phone, and what never does.
A case log shouldn’t need a single patient identifier, so Anesto doesn’t ask for one. Here is every place your data goes, why, and for how long. The Privacy Policy is the formal version; if the two ever differ, it wins.
The short version
No field for patient names, MRNs or birthdays. Nowhere to put them.
Off until you agree. Your words go to Anthropic, your voice to Groq. Turn it off anytime.
You sign in on ACGME’s own page. Anesto never sees your password.
Delete your account and its cloud data from the app, any time.
Where everything goes
Everything Anesto sends leaves your phone over an encrypted connection. Dashed lanes only happen when you choose them.
What Anesto never collects
Patient identifiers: none, by design
Anesto records the procedure, the anesthetic, the ASA class and an age band. None of that needs to know who the patient was, so there is no field for a name, an MRN or a birthday, and the capture bar carries the reminder “Do not enter patient names or identifiers.”
A safety net, not a promise. When a case is saved, Anesto blanks out numbers that look like medical record numbers and turns any age over 89 into “90+”. It can’t catch names or dates, and it doesn’t touch the words sent for AI parsing. It’s there for a slip; please never type or say identifiers in the first place, and follow your hospital’s rules about what you record.
AI parsing, on your terms
- Off until you say yes. Turning it on shows you exactly what goes where before anything is sent, and you check a box to agree.
- Turn it off anytime on the Account tab. Then nothing goes to Anthropic or Groq, and you fill in cases yourself.
- Your case text. What you type or say is kept with the case for up to 12 months, to make Anesto read cases better. The Case text switch keeps it on your phone only instead.
- Not for training anyone’s AI. Your case text is used only to improve Anesto’s own reading of cases.
ACGME
You sign in on ACGME’s own page inside the app, so your password goes to ACGME and nowhere else. Anesto only adds cases you choose to send; it never changes or deletes anything on ACGME. Exactly what Anesto does on ACGME →
Deleting
- A case: it moves to Recently Deleted, where you can restore it for 30 days. After that it no longer appears in the app, but a record of it stays in your account so it stays deleted on all your devices, until you delete your account.
- Your account: Account tab → About Anesto → Delete Account. Your account and all its cloud data are deleted. Cases still on the phone stay until you delete the app.
- By email: write to support@anesto.app and we’ll do it for you.
Questions people ask
Is Anesto HIPAA compliant?
Anesto is built so a case log never needs protected health information: it doesn’t ask for patient identifiers and has nowhere to put them. It’s your personal log, not your hospital’s record system, so your institution’s rules about what you write down still apply.
Can other users see my cases?
No. Each account is kept separate, so you can only see your own data, and it’s never shared with other users or used for advertising.
Does Anesto sell my data?
No. Anesto doesn’t sell personal information, and there’s no advertising in the app.
What happens to my data if I switch phones?
Sign in the same way on the new phone and your cases, sites and TEE exams come back from your account. How backup works →
The formal version
This page summarizes the Privacy Policy and the Terms of Use. Questions: support@anesto.app.