Clinical routes and location privacy

Overview

Preserve the scheduling experience without sharing clinical details across boundaries.

Step-by-step

1. Use the protected workflow to request an eligible appointment slot.
2. Review whether the general scheduler needs only non-identifying timing constraints.
3. Keep protected addresses and clinical context inside approved services.
4. Verify permission boundaries with synthetic test data.

Important checks

• Only necessary non-identifying information may cross the RL/RLH boundary.
• No patient details should be copied into general Google Calendar events.