Doxy.me
Summary
Doxy.me is a telemedicine platform that works through the web browser. It is essential that you keep your browser updated as security is entirely reliant on your browser. The service is free to use for patients and starts at $35 per month for providers.
Breach History
Has there ever been a breach or data leak?
No known hacks or data breaches!
🎉
Privacy Checklist
Is any kind of biometric data collected (health, heart, voice, etc.)?
Are you able to delete your data / the data collected about you?
Does it use cookies, telemetry, or third-party tracking scripts?
Is the privacy policy user-friendly (easy to understand)?
Does it have parental controls?
Does it use encryption to protect your data both in-transit and at-rest?
Does it get regular software and / or firmware updates?
Does it require you to create a strong password?
Is there a system in place for managing security vulnerabilities?
Does it have a privacy policy?
How Can It Snoop?
Does it have a camera or request / require access to a camera?
Does it have a microphone or request / require access to a microphone?
Does it track your location or request / require access to location data?
Account Requirements
Does it require an email address to use?
Does it require a phone number to use?
Does it require an address (home or office) to use?
Payment Options
Are you able to use a credit card as a payment option?
Are you able to use a cryptocurrency as a payment option?
Are you able to use PayPal as a payment option?
Are you able to use cash or gift cards as a payment option?
What Could Go Wrong?
Doxy.me does not require health care professionals to create a strong password when signing up, and two factor authentication is not an option, so accounts can easily be hacked. In this vein, someone could pretend to be a doctor or a patient, and there is little to no way to verify that each person is talking to the correct person. There is also a bug bounty program for Doxy.me, which proves that there are people actively trying to hack the service. Be aware of this before signing up.
How Does It Share Your Data?
Doxy.me has stated it does not store patient data. While Doxy.me does collect data from health care providers such as email, name, phone number, address, etc., this information is not shared with third parties.
Good Things
- Free for patients.
- Fully browser-based.
Bad Things
- Some security concerns.
- No standalone apps.
- Higher price for multiprovider plans.
Final Thoughts
Doxy.me does not appear to have suffered from a previous data breach. However, the service does not seem to be very secure in terms of verifying doctor or patient identities, so it is very possible the service could be hacked in the future. Consider this before using the service.