MediSolo Frequently Asked Questions

Question 1

What type of services does MediSolo provide?

Accepted Answer

MediSolo is a digital health platform that currently offers electronic health records management and prescription management for healthcare practitioners. This means you can digitally record patient information, store and retrieve medical records, and generate prescriptions through the platform. MediSolo does not provide teleconsultation or direct medical advice – it’s a tool for doctors to manage information. All medical care is delivered by the practitioner outside the app (in person or via their own consultation methods). The platform essentially replaces paper records and prescription pads with a secure digital system.

Question 2

Is MediSolo only for use in Sri Lanka?

Accepted Answer

Yes. MediSolo is designed for the Sri Lankan region, and our service is currently targeted at users within Sri Lanka. The platform’s terms and privacy practices are aligned with Sri Lankan laws and regulations. While technically an internet-based service can be accessed from anywhere, our support, language (currently English, possibly local languages in future), and legal compliance (like PDPA) are all focused on Sri Lanka. If you are a practitioner elsewhere, we advise against using MediSolo until we explicitly launch in your region, because different countries have different health data regulations. Practitioners in Sri Lanka can use MediSolo with confidence that it meets local standards, and patients’ data is kept within compliant systems.

Question 3

Who can access the patient records I store on MediSolo?

Accepted Answer

Only you (the practitioner) and those you explicitly authorize can access the patient records you enter. Each practitioner’s data is kept in a separate, encrypted repository accessible via their account credentials. MediSolo’s internal staff do not access your patient data unless it’s absolutely necessary for technical support or if required by law. We have robust access controls to prevent unauthorized viewing. Even other users of MediSolo (other doctors) cannot see your data – there is strict tenancy separation. Patients do not have direct login access to MediSolo (it’s not a patient portal); however, you can share records or prescriptions with your patients externally (e.g., by printing or emailing a prescription). If you have a clinic with multiple staff needing access, you might set up shared credentials or features we offer for teams, but that’s under your control. We also ensure data is secure in transit and at rest via encryption, so that even if someone intercepted the data, it would be unreadable. Protecting patient confidentiality is our top priority, and we align with the enhanced protections required for health data under Sri Lanka’s PDPA.

Question 4

Is my data safe and secure with MediSolo?

Accepted Answer

We employ industry-standard security measures to protect your data. All data is encrypted both at rest in our databases and in transit between your device and our servers. Each user’s data is isolated from others, which means even in a multi-tenant environment, your records are stored separately from any other clinic’s records. We also maintain firewalls and monitor for any unauthorized access. Regular backups are taken to prevent loss of data. In compliance with PDPA, we emphasize integrity and confidentiality of personal data. It’s worth noting that, while we make every effort to secure the platform, no system can be guaranteed 100% secure or available. Sri Lanka’s Electronic Transactions Act No. 19 of 2006 gives legal recognition to electronic records, so your e-records and e-prescriptions are as valid as paper – but it also means we must be vigilant in protecting them. We take that responsibility seriously. In the unlikely event of a security breach, we have procedures to notify users and authorities as required by law, and to help you mitigate any issue. Additionally, we advise users to keep their passwords strong and confidential. Overall, we are confident in our security but always stay updated and improving against potential threats.

Question 5

Does MediSolo share my information with any third parties?

Accepted Answer

No. We do not share your personal information or your patients’ data with any third-party companies or services. We have no advertising partners, no analytics trackers that siphon data, and no integrations that send out personal health information. The only exceptions would be if you specifically use a feature that transmits data somewhere (for example, if in the future you press a button to send a prescription via email or SMS, that obviously goes out to the recipient you choose – but that’s under your control). The privacy policy commits that we do not sell or rent data. We also do not use data for any purpose except providing the service to you. If a legal obligation arises – such as a court order – we may have to disclose certain data to comply, but that’s a rare scenario and we will limit to what’s legally required (and inform you if possible). Under professional ethics, the patient data you store is confidential; you as the practitioner are considered the custodian of that data, and MediSolo acts as a trusted processor. We even structure our system such that routine access by us isn’t needed, reinforcing that we’re not involved in redistributing your information.

Question 6

Do I need to get patient consent to use MediSolo for their records?

Accepted Answer

It is highly advisable to inform patients that you are using an electronic records system and to obtain their consent, especially when dealing with sensitive personal data like health information. Under Sri Lanka’s PDPA (Personal Data Protection Act), processing of health data is allowed under certain conditions – one of which is that it’s done by a licensed healthcare professional (like you) for treating the patient. This can be interpreted as a legal basis, but PDPA also emphasizes transparency and patient rights. Best practice is to include a note in your patient registration or consent forms stating that you use a digital system (MediSolo) to store their data securely, and that by agreeing, they consent to this form of processing. Most patients will appreciate that you keep records – whether paper or electronic – as long as you assure them it’s secure and only used for their care. If a patient refuses to have their data in an electronic form, you might have to make accommodations (though that would be rare). In summary: while you might not need separate written consent solely for MediSolo if it falls under the umbrella of consent for treatment, you should be transparent about it. It’s both good patient relations and part of complying with the PDPA’s requirement to process data lawfully, fairly, and with transparency.

Question 7

Is MediSolo compliant with Sri Lanka’s Personal Data Protection Act (PDPA)?

Accepted Answer

Yes, MediSolo is designed with PDPA compliance in mind. Sri Lanka’s PDPA, No. 9 of 2022, has been coming into force in stages and as of March 2025 the core data protection obligations and principles are in effect. We have aligned our policies and technical measures with those requirements. For example, PDPA identifies health data as a special category that needs heightened protection – MediSolo provides that via encryption and strict access control. We uphold principles like data minimization (we collect only what is necessary; note that we as a company hold very minimal personal data ourselves, since patient data is entered by practitioners for their use), purpose limitation (we don’t use the data for new purposes without consent), accuracy (you have control to update records, and we ensure data isn’t altered improperly), storage limitation (data isn’t kept longer than needed – see our retention policies), integrity and confidentiality (security measures to prevent unauthorized access), and transparency (our Privacy Policy explains what we do). We’ve also accounted for data subject rights – if your patient were to reach out for their data, we have ways to assist you to comply. Additionally, if any data is stored or transferred outside Sri Lanka, we ensure it’s done according to PDPA’s cross-border data provisions. Our commitment is that both practitioners and patients can trust MediSolo to handle personal data lawfully and safely. We stay updated on guidance from the Data Protection Authority of Sri Lanka to remain compliant.

Question 8

Does MediSolo provide medical advice or have doctors on the platform?

Accepted Answer

No, MediSolo does not provide any medical advice, diagnoses, or consultations. We are not a telemedicine service and we do not have in-house doctors treating patients. MediSolo is more like a digital filing cabinet and prescription pad for your practice. You, the healthcare provider, input information and use it to support your clinical decisions. The platform might in the future include knowledge-based tools (for example, a drug database or an alert for potential drug interactions), but those would only be reference aids and not definitive judgments. Using MediSolo does not establish any doctor-patient relationship between MediSolo and your patient. Any advice or prescription comes from you as the practitioner. We also don’t interfere with or check your medical content – for instance, we won’t stop you if you prescribe an unusual dosage (assuming the system allows free text) or if you input what might be a typo in a note. That is all under your control. Therefore, patients should continue to rely on their practitioner’s guidance, and practitioners should rely on their training and judgment. MediSolo is simply a tool, analogous to a stethoscope or a pen – it helps you do your job but doesn’t do the job for you.

Question 9

What if MediSolo is down or I cannot access the service?

Accepted Answer

While we aim for high availability, occasional downtime can occur (due to server maintenance, internet issues, etc.). If MediSolo is temporarily unavailable, you may need to revert to your backup plan during that period – for example, maintaining critical info offline or on paper until the system is back. We do not guarantee 100% uptime, though we strive for as close to that as possible. We have monitoring in place to detect outages and will work to fix any issues as quickly as we can. For planned maintenance, we usually give advance notice (e.g., “The system will be under maintenance on Sunday 2 AM to 3 AM”). If an unplanned outage happens, we will keep users updated via email or a status page. It’s wise to regularly export important data (like an updated patient list or schedule) so that you’re prepared to manage short-term if the system goes down. In the event of a longer downtime (which we certainly hope to avoid entirely), we would consider emergency measures like providing data exports if possible. Our Terms of Service include a limitation that we are not liable for consequences of downtime, since it’s an inherent risk in any online service, but we absolutely understand it can be disruptive and we treat uptime as a priority. We maintain backups to prevent data loss, so even if the platform is down, your data remains safe and will be there when service resumes. If you ever encounter accessibility issues, please contact support so we can assist and confirm what’s happening.

Question 10

How long does MediSolo retain data? Can I delete or export my data?

Accepted Answer

We retain your data as long as you continue to use the service, since the whole point is to maintain ongoing medical records. If you need to delete specific data (say a wrong entry or a patient requests deletion), you can do so through the app’s interface – deleting a record will remove it from active use, though as noted in our Privacy Policy, it might linger in a secure backup for a short time until that backup is rotated out. If you choose to stop using MediSolo entirely, you can request deletion of your account and all associated data. We will then securely erase the personal data, after giving you an opportunity to export anything you need to keep. Data export: We support exporting patient records in a standard format (for example, as PDF summaries or CSV files for tabular data). This is useful if you want a local copy or if you’re moving to a different system. Just remember that once exported out of MediSolo, keeping those files secure is up to you. By default, we follow the “storage limitation” principle – keep data only as long as necessary. If a law or regulation requires you to keep records for a certain period (for instance, some medical guidelines might say keep records for X years), that responsibility is on you to adhere to, but MediSolo enables you to meet it by storing as needed. We won’t delete anything on our own unless you ask, except possibly to purge really old data that you haven’t accessed in many years, but if we ever planned such archival cleanup it would be communicated. As of now, consider that your data remains until you decide to remove it. We also handle any personal data per PDPA retention requirements, so we don’t keep, for example, log data longer than necessary. In summary: yes, you can delete data (single entries or whole account) and yes, you can export data anytime; we keep it only to serve you or as legally required.

Question 11

Where is MediSolo hosted? Does data leave the country (Sri Lanka)?

Accepted Answer

MediSolo’s infrastructure is currently cloud-based, and we aim to host data in secure data centers with high standards. If possible, we use servers located in Sri Lanka or the region (for example, a data center in Asia, such as Singapore, if local hosting isn’t feasible). We understand some clients prefer data residency in-country. Even if data is stored on a server outside Sri Lanka, the PDPA allows it provided certain safeguards are in place, and we ensure those safeguards. At this time, we do not publicly list the exact server location for security reasons, but we can say that data is not, for example, sitting in random jurisdictions without oversight. We use well-reputed providers that comply with privacy standards. All data is encrypted, so even the hosting provider cannot read it. If you specifically require your data never to cross borders, you can discuss with us – we might be able to arrange Sri Lanka-only storage if it isn’t already. Keep in mind that some ancillary data (like email notifications, if we send to you, or support communications) might route through global services (e.g., our support email might be Gmail or similar), but your core patient data stays in the database. We comply with cross-border data transfer rules: if no official adequacy decision exists for a country, we have agreements and security to protect the data. In simpler terms: your data is effectively treated with the same care no matter where the server is, and legally we ensure any foreign hosting is bounded by contracts to uphold privacy. We continuously monitor the legal landscape – if, say, Sri Lanka mandates critical health data to be stored locally, we will adjust accordingly. Your trust is important to us, so we are transparent about data handling and open to questions.

Question 12

I’m not a registered business. Does that affect my use of MediSolo?

Accepted Answer

MediSolo can be used by individual practitioners (not just companies or clinics). You do not need to be an incorporated business to sign up – a solo doctor or therapist can use it in their personal capacity as a professional. The question of not being a “legal entity” is more on our side: currently, MediSolo is a product/service and may not yet be under a formally registered company (as you noted in the context). Regardless of that, we operate professionally and these Terms and Privacy commitments are made to you in good faith. If and when MediSolo becomes part of a corporate entity, we will update the terms with that information (name of the company, address, etc.). For now, you should ensure you are practicing with whatever licenses are needed (e.g., if you’re a doctor, you have your medical license – which is separate from using MediSolo). Using MediSolo doesn’t confer any special legal status; it’s just a tool. If you’re asking from a liability perspective: since MediSolo as a provider disclaims liability, you as the practitioner carry the professional liability for your practice, and presumably have or should have malpractice insurance or other coverage as required by your field. The fact that MediSolo (the service provider) is not a registered business entity yet doesn’t prevent you from using it, but it does mean the contractual terms are between you and the individuals behind MediSolo service. We ensure that all legal references (like PDPA, Electronic Transactions Act, etc.) are adhered to by us as a service operator, entity or not.

Question 13

What happens if there is a data breach?

Accepted Answer

If a data breach were to occur (for example, unauthorized access to personal data due to a cyber attack or internal error), MediSolo will take immediate action in line with legal requirements and our own incident response plan. We will contain the breach, secure the system, and assess the scope. Affected users (practitioners) would be notified as soon as possible, and we would provide details of what happened and what data might be affected. We’d also give you guidance on steps to take (for instance, if passwords need changing or if you should inform patients). Sri Lankan law (PDPA) likely will require us to notify the Data Protection Authority within 72 hours of certain breaches and possibly affected individuals as well. We are prepared to comply with these rules. Our priority would be transparency and mitigation – e.g., if some data got exposed, helping you understand which records so you can manage patient communication, etc. We also would bring in security experts to eliminate any vulnerability that led to it. To date, we have had no breaches and we work hard to keep it that way with strong security. But no system is infallible, so we want our users to know we won’t hide issues and will work with you if anything occurs. Also, note: if a breach is caused by your own account being compromised (say your device is stolen or your password is leaked through phishing), we’ll still assist but that scenario is not an attack on our infrastructure but rather on your account. It underscores why using strong, unique passwords and being cautious with login info is important. We also log access, so we can usually tell if a suspicious login happened, and we might proactively alert you if we detect something odd.

Question 14

Can I use MediSolo to write prescriptions, and are e-prescriptions legally valid in Sri Lanka?

Accepted Answer

Yes, one of MediSolo’s core features is e-prescription management. You can create a prescription in the system which includes all necessary details (patient name, date, medication, dosage, your name and registration, etc.), and then you can either print it out or generate a PDF to send to the patient or pharmacy. In Sri Lanka, electronic documents and records have legal recognition under the Electronic Transactions Act, No. 19 of 2006, which means an electronic prescription is generally considered as valid as a written one, assuming it meets the required format and is issued by a licensed doctor. During the COVID-19 pandemic, for example, electronic prescriptions (even via messaging apps) were accepted due to necessity. That said, it’s important that your e-prescription from MediSolo clearly identifies you (the prescriber) and has some form of authentication. MediSolo may include your digital signature or a unique prescription ID. Pharmacies in Sri Lanka are increasingly familiar with e-prescriptions, especially if they can verify it came from a known clinic or doctor. We recommend you still follow any guidance from the Sri Lanka Medical Council or Ministry of Health regarding prescriptions. For instance, controlled drugs might still require a paper prescription by law (check current regulations). But for most medications, an electronically generated prescription that you sign (even if the “signature” is just your name and registration number printed, or a scanned signature) should be honored. Always include your contact info on it so a pharmacist can call to verify if needed. MediSolo does not automatically send prescriptions to pharmacies, it’s up to you to give it to the patient (printed or digital). We plan to keep e-prescriptions compliant with any emerging standards. In summary: e-prescriptions via MediSolo are legal and convenient, and backed by the Electronic Transactions Act’s recognition of electronic records; just use them responsibly as you would paper scripts.

Question 15

Does MediSolo integrate with other systems (labs, pharmacy, etc.) or use any third-party plugins?

Accepted Answer

Currently, no, MediSolo is a self-contained system without third-party integrations. We made this choice to maximize data security and simplicity. It doesn’t automatically fetch lab results from lab systems, nor does it send data to pharmacies or government systems. If we ever add integrations (for example, an option to send lab test requests electronically to a partner lab, or to pull patient data from a national EHR), it will be optional and clearly explained. We also do not rely on third-party analytics or marketing services that could track user data. The only external services in use might be for infrastructure (like a cloud server, or email service to send notifications), but those are under strict contracts and don’t use your data for anything except delivering our service. So for now, you can assume that when you enter data into MediSolo, it stays in MediSolo. We’re not sharing it with Google, Facebook, or any advertiser, etc. When you log in, everything you see is generated by our system. If in the future we incorporate tools like payment gateways (if we allow you to charge patients via MediSolo, for instance), or maybe a feature like sending SMS reminders (which uses an SMS gateway), those will involve third parties, but we will ensure they are compliant and we’ll update our privacy policy accordingly. We also won’t activate such features without informing users. So the answer: no current integrations, and any future ones will be under strict agreements with no unauthorized data sharing.

Question 16

Who is responsible if something goes wrong using MediSolo (like a software error causes a problem)?

Accepted Answer

Our Terms of Service include disclaimers that MediSolo as a service provider is generally not liable for issues arising from use of the platform, especially in terms of medical outcomes or indirect damages. We stand by ensuring the software works as intended, but if, for example, a bug in the software occurs, our responsibility would be to fix the bug – we would not typically be liable for any harm that bug caused, to the extent permitted by law. Let’s say a software error prevented you from seeing an allergy note and you prescribed something the patient was allergic to – MediSolo would not take on the legal liability for that; it remains a practice of medicine issue. That being said, we do our utmost to avoid such critical bugs! If data is corrupted or lost due to our fault, we will try to restore it from backups. We also mention in our Terms that we don’t guarantee the service to be error-free or 100% uptime. As the practitioner, you have to use professional diligence as well: double-check critical information, and maintain backups or hard copies when needed. Another angle: If a patient or authority tries to sue or claim against MediSolo for something you did (like wrongful input or misuse of data), our Terms require you to indemnify us – meaning you protect us from that claim. We’re not out to shift blame unreasonably, but this is standard for software tools: the user has control and thus primary liability for their actions on the platform. Of course, if MediSolo as a product fails to meet what it promised in a fundamental way, we’d address it, perhaps via support or possibly refunds if you paid, etc., but not usually as legal damages. We believe clear communication and prompt support will resolve most issues before blame becomes a question. We also carry our own liability considerations – if something is directly our fault (say, a security breach because we were negligent), we could be answerable under data protection law or contract. However, in contract terms, we limit the amount of liability (often to the fees paid or similar) to keep things fair and not ruinous. The bottom line: we aim never to have things go wrong, but if they do, we each handle our sphere – you handle medical responsibilities, we handle technical fixes, and we work together to solve any problem.

We hope this FAQ has addressed your questions. If you need further clarification, please contact us at support@medisolo.example. MediSolo’s goal is to provide a secure, user-friendly platform for health records while respecting legal boundaries and roles. Your feedback is always welcome as we continue to improve the service.

Streamline Your Practice,
Elevate Patient Care

The Problem

The Solution

Everything You Need to Run a Modern Practice

Empower Your Practice with Actionable Insights.

Transform Your Practice with Proven Benefits

Save Time

Improve Accuracy

Enhance Patient Care

Data-Driven Decisions

Secure & Compliant

Trusted by Healthcare Professionals

Dr. Sarah Johnson

How It Works

Choose the Perfect Plan for Your Practice

Calculate Your Perfect Plan

Frequently Asked Questions

Ready to Transform
Your Practice?

Streamline Your Practice,Elevate Patient Care