ShifaTH guide

Profile ownership and delegated access

Creating a profile, owning it and receiving delegated access are different relationships to the patient’s information.

01

A managed profile does not establish legal authority

A User can create a supported profile for another person and identify the relationship. That label does not itself establish guardianship, legal authority or every permission to share patient data.

02

The patient can claim their existing profile

The patient verifies through their own account using the required passport and selfie evidence. An approved claim changes access while preserving the same profile and history. It is not an ordinary transfer between two managing Users.

03

Delegation grants a defined scope

After ownership, the patient may grant selected management permissions. A delegate’s access depends on that grant and current authorization. Delegation does not transfer ownership or permit whole-profile erasure solely through delegated access.

04

Sharing requires its own action

Sending patient data uses the applicable submission declaration and sharing controls. A representative’s declaration is not described as consent personally given by the patient. Formal representation, minor and capacity rules belong to approved Legal content.