Safety & Security

At messageGP, your privacy and online safety are our top priorities. We are committed to safeguarding your personal information and ensuring that every online GP consult through WhatsApp is secure and confidential.

Built for healthcare,
not just messaging

Standard WhatsApp was designed for personal chats. We use the WhatsApp Business API - a completely different, compliance-grade platform built to meet the strict data protection standards required in healthcare.

End-to-end encyption

Every message you send us is encrypted in transit. Neither WhatsApp, Meta, nor any third party can read the content of your consultation.

UK-based secure storage

Your consultation data is stored on secure UK servers - not on our personal devices - ensuring compliance with NHS data residency requirements.

Auditable and
compliant records

Consultations are securely logged for clinical governance and CQC compliance. Your records are never stored on personal devices or shared without your consent.

How we keep your 
health data secure

Loading content
Loading content
Loading content
Loading content

How to keep your information secure

  • Disable chat backups in iCloud (iPhone) or Google Drive (Android) since these are not encrypted by WhatsApp
  • Use a secure device with a strong passcode or biometric 
lock to prevent unauthorised access
  • Enable two-step verification in WhatsApp:
    1. Open WhatsApp and go to Settings (⚙️)
    2. Tap Privacy → Two-step verification → Enable
    3. Set a six-digit PIN and enter your email for recovery
    4. Tap Save, and two-step verification is now active
  • Delete conversations with messageGP after you have completed the consultation. We securely store the consultation on our clinical system
  • Log out of linked devices if using WhatsApp Web
  • Turn off message previews on your phone’s lock screen to prevent unauthorised viewing
  • Do not forward medical messages to others or share GP chats in group conversations

Why the API matters for your privacy

We use the WhatsApp Business API - not a standard personal WhatsApp account. This is a business-grade, regulated communication platform built for organisations that handle sensitive data. Unlike a personal account, the API means your messages are stored on certified secure servers, never on a doctor's phone, and every interaction is auditable for compliance. We do not share your WhatsApp conversations with Meta.

Trusted. Regulated. Safe.

messageGP is proudly regulated by the CQC. Our England-based Doctors are GMC registered and NHS trained, ensuring the highest standards of patient care and safety.

Got questions or concerns?

If you have any questions about data safety or online security, our team is here to support you. Please feel free to reach out, we’re always happy to provide more information and reassurance.