How does Phreesia support patient privacy when using shared devices in clinical settings?

• A. Disable concurrent sessions, require logout, enforce screen locking, use patient-screen privacy modes, ensure PHI is not visible to others, and maintain device cleaning/disinfection.
• B. Allow multiple concurrent sessions so staff can assist more patients.
• C. Store PHI on the device without encryption for faster access.
• D. Share login credentials with patients to verify identity.

Answer: (B)

Protecting patient privacy on shared devices means ensuring that sensitive information is only visible to the right user, only for the right amount of time, and never exposed to bystanders. Phreesia supports this by enforcing logout after each patient encounter, requiring screen locks when the device is idle, and offering privacy modes that keep PHI from being visible to others nearby. It also ensures PHI isn’t left on-screen between users and that devices are properly cleaned between patients. These practices minimize the chance that a second person could see another patient’s information on a shared screen and help meet privacy standards in clinical settings. Options that would allow multiple concurrent sessions, store PHI unencrypted on the device, or share credentials with patients would undermine privacy and should be avoided.