Back to Blog
How Do AI Phone Agents Handle Patient Privacy in Ontario?

How Do AI Phone Agents Handle Patient Privacy in Ontario?

October 2, 2026

Under PHIPA, an AI phone agent acts as your clinic's agent. Here's what a well-built one does with patient information: Canadian storage, encryption, 30-day deletion, no AI training, access controls and a secure chat for anything sensitive.

Short answer: a well-built AI phone agent works as your clinic's agent under PHIPA, so it may use patient information only to serve your clinic, and its controls have to show that. In practice that means: patient data stored in Canada, encryption in transit and at rest, no call audio kept, transcripts deleted automatically within 30 days, no training on your patients' information, unique staff logins with multi-factor sign-in and an audit log of every access, and a secure web chat, not SMS, for names, birth dates and anything sensitive.

Your clinic stays the custodian; the AI service is your agent

Ontario's Personal Health Information Protection Act (PHIPA) makes your clinic the health information custodian. A service that answers your phones on your behalf is your agent: it may collect, use and keep patient information only to do that job for you, it must protect it, and it must tell you promptly if anything is lost, stolen or accessed without authorization. That's the bar to measure any AI receptionist against.

What ZeroMiss does on every call and message

  • Stores patient information in Canada only. Conversation records, call notes and requests sit in our cloud provider's Montréal region.
  • Encrypts everything in transit and at rest. Calls between the telephony provider and our voice system are encrypted (signalling and audio), and unencrypted calls are refused. Web traffic uses TLS 1.2 or newer. Stored data is encrypted, and identity details and call transcripts get a second layer with a key that belongs to your clinic alone.
  • Keeps no call recordings. Audio is turned into text and discarded. Written call notes go to your dashboard and are deleted automatically after 30 days.
  • Doesn't train AI on your patients. Not ours, and our speech and inference providers are contracted and configured not to retain or train on it.
  • Collects the minimum. The phone assistant never asks for health card numbers or medical history. It takes a name only when a person needs to call back.
  • Moves sensitive steps to a secure chat. Texts carry a private link, never health details. Name and date of birth go into secure fields that the AI model doesn't see.
  • Controls and records human access. Each staff member has their own login with a one-time code, roles limit what they see, and every view of patient information is written to an audit log you can export.
Canada
Where Patient Data Is Stored
30 days
Automatic Deletion of Transcripts
0
Call Recordings Kept

What about processing outside Canada?

Storage is Canadian. Turning speech into text and generating replies happens live through contracted inference and telephony providers, some of which operate outside Canada. They process the conversation to produce the reply and don't keep it. We list every provider by role in our subprocessor register and describe this in the patient-notice wording we give you, so your privacy statement can say it plainly. That transparency is part of a PHIPA-aligned setup: your clinic decides with full information.

What you should get from any vendor

  • A written agreement that names them as your agent and limits use to serving your clinic.
  • A data-flow description: what's collected, where it's stored, how long it's kept.
  • A subprocessor list (by role is fine) with each provider's retention.
  • A breach response plan with a commitment to notify you at the first reasonable opportunity.
  • An audit log you can read and export, and a way to delete everything when you leave.

ZeroMiss gives clinics all of these as a privacy package at onboarding, including a privacy impact assessment template and the patient-notice wording.

Frequently Asked Questions

Is ZeroMiss PHIPA compliant?

PHIPA has no certification, so no vendor can honestly claim to be certified. ZeroMiss is built to a PHIPA-aligned posture: it acts as your agent under a written agreement, stores data in Canada, encrypts it, deletes conversation records after 30 days, logs every access, and gives you the documents your own privacy obligations call for.

Does the AI tell callers it's an AI?

Yes. It identifies itself as the clinic's AI assistant in its first sentence, before anything is collected.

What happens to the information when we stop using ZeroMiss?

We delete your clinic's data and destroy your clinic's encryption key, so any remaining copy can't be read, and confirm it in writing.

Who do patients contact about privacy?

Your clinic, as the custodian. We pass any access or correction request we receive to you within two business days.

Bottom Line

Ask any AI receptionist vendor four questions: where is patient data stored, how long is it kept, who can see it and how is that logged, and is any of it used to train AI. ZeroMiss answers: in Canada, at most 30 days with automatic deletion, only your authorized staff with every view logged, and never.

Related questions