MediData sends invoice documents on behalf of service providers such as medical practices, hospitals or laboratories. However, both addresses and document content are managed exclusively by our clients. All we do is ensure that these documents find the right recipients in a data-secure way. This is increasingly being done electronically, but sometimes we also send invoice documents by post.

We send you an e-mail with a link to our patient portal. As soon as you click on this link, we send you an SMS with a code. You must then enter the SMS code in the patient portal to download the document. You therefore don’t need to create a login or install additional software.

We can use the patient portal to authenticate you through your e-mail address and mobile phone number. If a service provider makes a mistake with your e-mail address (e.g. peterbeispiel@mail.com instead of peter.beispiel@mail.com), the invoice document cannot be sent to the wrong person because the confirmation via mobile phone number will not work. This is how we ensure data security. This security is our top priority: that’s why we never send attachments or details in our e-mails that allow conclusions to be drawn about the true recipients.

Yes, the receipt of the invoice or invoice copy (PDF) is encrypted (via an HTTPS page) and the data is secure. The e-mail to the recipients is sent unencrypted. This is possible because the e-mail itself contains only one link, but no particularly sensitive data. Intercepting this e-mail does not allow any conclusions to be drawn about recipients’ data.

Yes, service providers are obliged to obtain this consent from the recipients. However, MediData cannot control this. It is therefore the express responsibility of our clients to provide only e-mail addresses and telephone numbers for dispatch, which we may also write to. 

In this case, please contact the relevant service provider directly (e.g. practice, hospital or laboratory). Only our clients can change these settings.