Medical SpasDallas-Fort Worth since 1989

The before-and-after photo just landed in someone's personal camera roll.

We configure the managed devices used for clinical photography and test where your app actually saves images, including copies outside the patient record. When the photo product and the chart disagree, we take it up with both.

Ask one IT question

We work for you.

Our managed IT has no long-term contract and no onboarding fee, and clients stay for decades anyway.

Our clients' systems are watched around the clock by a staffed security operations center, every day of the year. Very few IT companies offer that to a small business, and we do.

We do not advertise and we do not do hard sells. Almost every client has been with us more than ten years. Most have been with us about twenty.

We resell nothing and take no vendor commissions, so nobody pays us to recommend their product.

Within our scope, we document the domains and administrative accounts your business controls. That documentation is yours whenever you want a copy, including when you leave.

It can start with a slow app, not a hacker

A med spa treatment room between appointments: a clean empty treatment chair, a device cart with a handpiece in its cradle and a small screen showing indistinct shapes, and a tablet on a stand on the counter behind.

The clinical app is slow, so somebody uses the ordinary Camera app. That photo is outside the clinical record and can land in the camera roll, an iCloud or Google Photos library, a messaging app or a device backup.

HHS says using a patient's photo or other health information for marketing generally needs the patient's written authorization, with limited exceptions. Under HIPAA's Safe Harbor method, full-face photographs and comparable images must be removed. Removing the patient's name alone does not meet that requirement.

Where the clinical application supports direct capture without leaving a camera-roll copy, we test and configure that workflow, so the approved method is also the easy one for staff.

One person can end up holding every key

One capable person becomes the administrator of the practice system, the payment processor, email and the website, the photo and consent app, patient financing and every device cloud. Some are one company: PatientNow says Crystal Clear Digital Marketing, RxPhoto and Envision joined it to make a single platform.

If that person leaves, getting the accounts back becomes a hunt through personal inboxes and forgotten recovery codes. For the systems we manage, we can set up individual logins and a second administrator wherever the vendor allows it, and plan for same-day access removal when you tell us somebody has left.

Where the records live can matter under Texas law

If your attorney determines that Texas Health and Safety Code Chapter 183 applies to your practice and a particular system, it requires a covered entity to ensure electronic health records containing patient information are physically maintained in the United States or a U.S. territory. That includes records held by third-party data centers and cloud providers.

We can ask each vendor to put in writing where your records are stored.

Your treatment devices are on your network too

Devices like the Hydrafacial Syndeo connect over Wi-Fi for usage tracking, remote diagnostics and automatic updates. Put one on an unrestricted network alongside staff laptops, guest Wi-Fi and payment terminals, and a problem on any of them can become a problem for all. Where the device and payment vendors support it, we design and test separate segments, after the device vendor confirms calibration and updates keep working.

Can your vendor restore one deleted patient record?

Ask whether your vendor can restore one patient record, and whether you can leave with readable records. PatientNow tells Essentials and EnvisionNow customers they must export their data before the contract ends.

Ask before the next photo ends up in the wrong place

Ask us anything. One IT question, answered straight, no charge and no pitch.

Can your staff take a treatment photo without leaving a copy in somebody's camera roll? Start there.

Do you already have someone doing your IT? Ask anyway. If they have it handled, that is what you will hear.

Call (817) 265-5000 or email info@bdunn.com.