Most people have a clearer filing system for their utility bills than for their medical records.
Lab results arrive as PDFs in your inbox. Prescription records live somewhere in a patient portal you log into once a year. Vaccination certificates were downloaded during a health crisis and haven’t been looked at since. Insurance explanation-of-benefits documents arrive as emails and are either deleted or left to accumulate. Specialist letters get forwarded to a family member who needed to know.
The result is that your complete medical history — a document set that tells a precise story about your body, your medications, your mental health, your reproductive choices, your diagnoses — is scattered across a dozen platforms, stored wherever you happened to put each piece at the time.
This matters because medical data is among the most sensitive personal information you hold. It’s worth understanding where it currently lives and whether that location is appropriate.
The Difference Between Your Records and Your Provider’s Records
There’s a common misunderstanding about HIPAA, the US federal health privacy law. HIPAA imposes obligations on healthcare providers, insurers, and their business associates. It governs how your doctor’s office stores your records, who can access them, and how they’re transmitted.
HIPAA does not govern what you do with your own records after you download them.
When you download a PDF of your lab results from a patient portal and save it to Google Drive, Google is not bound by HIPAA. When you email your prescription history to a family caregiver, the email provider is not bound by HIPAA. When you upload your vaccination record to a travel document app, HIPAA doesn’t apply.
This distinction is significant. The portion of your medical history that your providers hold is protected by law. The portion you hold yourself — and the way you store and share it — is governed only by the terms of service and privacy policies of whatever platforms you use.
What You’re Actually Storing (Probably in the Wrong Place)
The category of personal medical records is broader than most people think. Here’s what typically accumulates over years:
Lab results: Blood panels, cholesterol levels, glucose tests, STI screenings, genetic markers if you’ve had testing. These tell a detailed story about your physical health over time.
Prescription records: A history of what medications you’ve taken and when, including treatments for mental health conditions, reproductive health, chronic conditions, or addiction.
Explanation of Benefits (EOB) documents: Every insurance claim processed generates an EOB. Collectively, these documents reveal what you were treated for, by whom, when, and what it cost.
Specialist letters and referrals: A letter from a psychiatrist to your GP, a referral to an oncologist, a note about a procedure — these often contain detailed clinical information.
Surgical and procedure records: Discharge summaries, operative notes, post-procedure instructions.
Vaccination and health certificates: Increasingly required for travel, employment, or educational settings.
Mental health notes: Therapy session summaries, psychiatric evaluations, crisis documentation.
Imaging reports: MRI, CT, X-ray findings described in clinical language.
Each category carries different sensitivity. Prescription records for psychiatric medications or reproductive health are particularly sensitive given their potential legal and professional implications. But any health record can affect insurance applications, employment decisions, relationship dynamics, or legal proceedings if it ends up somewhere it shouldn’t.
Where These Records Are Probably Living Right Now
In your email inbox. This is the default storage location for most people’s medical documents. Labs send results by email. Patient portals email you when documents are ready. Insurers send EOBs by email. If you’ve had Gmail for ten years, you have a searchable archive of your health history sitting in Google’s infrastructure.
Google can read the content of your emails, including attachments. Their stated policy is not to use email content for targeted advertising within Gmail, but the terms governing what Google may do with data held in its systems are broad. Government requests for email content are processed under the Stored Communications Act, which provides less protection than a warrant requirement in many circumstances.
In a cloud drive, unsorted. Downloading PDFs “to keep” and dragging them into a cloud drive is the next most common approach. Google Drive, Dropbox, iCloud Drive — these services encrypt your files, but with keys the provider controls. The provider can access your files and can be compelled to produce them under legal process.
In a patient portal, indefinitely. Patient portals are more secure than general cloud storage for the time they hold your records, but they’re a poor long-term archive. Patient portal providers change, practices close, and systems are discontinued. Records that exist only in a portal can become inaccessible when the portal changes.
Nowhere, or nowhere reliable. A meaningful proportion of people have no consolidated personal medical record at all. If asked to produce a complete medication history, or a record of their vaccinations, or their family’s health history, they couldn’t. The records exist in scattered systems, some of which require provider login credentials to access, some of which have a retention window.
What Good Medical Record Storage Looks Like
Consolidation
The starting point is bringing your records together in one place. This requires downloading documents from every patient portal and health provider that holds records for you. Most portals now provide PDF downloads as a standard feature. This is time-consuming once and then much lower-effort as a maintenance habit.
Separation from your email
Your email inbox is not appropriate storage for sensitive medical records. It’s searchable by the email provider, is subject to the same access as all your other email, and mixes sensitive medical content with general correspondence.
Keeping medical documents in a dedicated storage system — even just a dedicated folder in cloud storage — is better than having them in your inbox. Moving them to a system designed for sensitive personal documents is better still.
Encryption you understand
The standard for files at rest should be that they’re encrypted in a way that protects you against the provider’s own access as well as external breach. True zero-knowledge encryption (where the provider never holds the decryption key) offers the strongest technical protection. Server-side encryption with AES-256 is weaker — the provider holds keys — but still substantially better than unencrypted files.
Logical organisation
Medical records become useful when you can find what you need quickly. A simple folder structure organised by year, with subfolders by category (lab results, prescriptions, EOBs, specialist correspondence) is enough to make records retrievable.
Backup
Medical records are irreplaceable. The specialist letter from six years ago about a diagnosis that’s relevant to your care today can’t be recreated. If the only copy exists on a platform you lose access to, it’s gone.
Keeping a local backup copy — on an encrypted external drive or a trusted offline location — ensures that cloud service changes, account lockouts, or provider shutdowns don’t result in permanent loss.
The Specific Risks to Manage
Legal and insurance exposure. Medical records can affect insurance applications (in contexts where health history is legally relevant), custody proceedings, disability claims, and employment decisions in healthcare and security-cleared roles. Where your records are stored affects who can access them under legal process.
Reproductive health records. Given recent legislative changes in several US states, reproductive health information — contraception, fertility treatment, pregnancy loss, pregnancy termination — carries specific legal risk in some jurisdictions. Records documenting these should be stored with particular care about who can access them.
Mental health documentation. Psychiatric diagnoses, therapy records, and mental health crisis documentation can affect professional licensing, custody proceedings, and security clearances. The sensitivity is similar to reproductive health records: not just privacy-sensitive but potentially legally consequential.
Identification documents bundled with health records. Many medical workflows involve identity verification. It’s common for ID documents, insurance cards, and medical records to end up in the same storage location. This bundles the sensitivity of health records with the immediate security risk of identity documents.
How daftei Fits Into This
daftei is a personal vault designed for exactly this kind of document — files too sensitive for general cloud storage, too important to be scattered or unorganised.
Every file stored in daftei is encrypted at rest with AES-256 and in transit with TLS 1.3. daftei doesn’t run advertising, doesn’t sell user data, and doesn’t use your content for AI training purposes. When you delete a file, there’s a 30-day grace period, after which erasure is permanent and irreversible.
daftei is GDPR and CCPA compliant, which means you have legal rights over your data — including the right to access, correct, and permanently delete it.
The 5 GB free tier is sufficient for most people’s entire personal medical record set — PDFs, letters, and images compress well. Unlimited storage is available on Pro at $5.99/month or $44.99/year, or as a lifetime plan at $89.99.
A Practical Starting Point
If you want to improve how your medical records are stored, here’s a manageable starting approach:
- Make a list of every patient portal, healthcare provider, and insurer that holds records for you.
- Schedule a two-hour session to download key records from each: the last five years of lab results, your current medication list, major procedure records, vaccination history.
- Choose a dedicated storage location that isn’t your email inbox — a personal vault app, an encrypted folder in dedicated cloud storage, or a local encrypted drive.
- Set a calendar reminder twice a year to download new records as they accumulate.
- Tell a trusted person where your records are and how to access them in an emergency.
The goal isn’t a perfect system from day one. It’s a better system than scattered email attachments and inaccessible patient portals. That’s achievable in an afternoon.