1. Security Overview
At AarogyaNari, we treat the confidentiality and integrity of our healthcare platform and patient interactions with the highest degree of diligence. We employ modern web security standards to protect patient inquiries, consultation bookings, and health records from unauthorized access.
2. Technical & Operational Safeguards
- HTTPS & Transport Layer Security: All data transmitted between your browser and our servers is encrypted using modern TLS protocols.
- Zero Financial Credential Storage: We never capture or store credit/debit card numbers, UPI PINs, or banking passwords on our web servers.
- No Account Password Vulnerability: The platform operates without storing sensitive user login passwords, eliminating credential stuffing and account takeover risks.
- Sanitized Content & Input Validation: Strict client and server input sanitization to prevent Cross-Site Scripting (XSS) and injection attacks.
3. Telehealth & Consultation Privacy
Video consultations and medical report reviews conducted via WhatsApp benefit from WhatsApp's end-to-end encryption. All medical records and diagnostic ultrasound/blood test reports submitted voluntarily by patients are accessed solely by Dr. Sanskriti Kushwaha and authorized clinic personnel for clinical review.
4. Responsible Vulnerability Disclosure
We value the security research community. If you discover a potential security vulnerability in our website or PWA application, we appreciate your responsible disclosure to help us maintain platform security for all patients.
Security Contact: Ksanskriti97@gmail.com
Subject: [Security Vulnerability Report] AarogyaNari
5. Researcher Guidelines
When reporting vulnerabilities, we kindly request researchers to:
- Provide sufficient technical detail and reproduction steps without accessing, modifying, or deleting real patient consultation records.
- Refrain from Denial of Service (DoS/DDoS) attacks or automated spamming of consultation forms and WhatsApp endpoints.
- Allow reasonable time for our technical team to investigate and remediate reported findings before public disclosure.