Core principle
Sensitive health-adjacent information should never move casually through a product. Access needs to be deliberate, role-based, and visible to the user.
What a consent-led system needs
- Clear medical consent screens before any professional workflow begins.
- Visible boundaries for secure chat, video consults, summaries, and invoices.
- User-controlled sharing logic that can be turned off or narrowed.
- Language that makes it obvious Taby is not a medical emergency service.
Why this belongs in public research
Trust is not only built in product code. It is built by explaining how the system behaves before the user is asked to rely on it.