Chrome Extension Privacy Policy

For the MedReception for eClinicalWorks browser extension.

Last Updated: 09/19/2026

What this extension does

MedReception for eClinicalWorks lets authorised MedReception Studio users document a telephone call into their practice's eClinicalWorks system. It can open a patient's chart, start a telephone encounter, and create one assigned to a member of staff.

It acts inside the eClinicalWorks session the user has already signed into, in their own browser, on their own computer. It is a convenience layer over actions the user can already perform by hand.

What we collect

Nothing. The extension does not collect, store, transmit or sell personal information or protected health information. It contains no analytics, no telemetry, no advertising identifiers and no third-party trackers, and it sends nothing to MedReception servers.

How information is handled

• Patient and staff details read from the eClinicalWorks page — names, dates of birth, account numbers, staff names — are used only to populate the lists the user chooses from, and only for as long as that page is open. They are not written to disk, not cached, and not transmitted anywhere.
• The note the user types in MedReception Studio is passed to the extension and typed into the eClinicalWorks encounter. It is not retained by the extension afterwards.
• All data stays inside the user's browser and their authenticated eClinicalWorks session. The extension never has its own connection to eClinicalWorks and never holds eClinicalWorks credentials.

Who can communicate with the extension

Only https://studio.medreception.ai. This is enforced by Chrome through the extension's externally_connectable manifest entry, and checked again by the extension itself. No other website can reach it, and no page can make it act without a signed-in MedReception Studio session.

Permissions, and why each is needed

• scripting — to fill the telephone-encounter form inside the user's eClinicalWorks tab. This is the extension's core function.
• tabs — to find the eClinicalWorks tab and bring it to the front so the user can see what was written.
• Access to https://*.ecwcloud.com — every eClinicalWorks practice is served from its own subdomain, so a single fixed address cannot work across customers.

The extension requests no other permissions. It has no access to browsing history, bookmarks, downloads, the microphone, the camera, or any site other than eClinicalWorks.

Remotely hosted code

None. All executed code ships inside the extension package, as Chrome's Manifest V3 requires. MedReception Studio sends parameters — which patient, which staff member, what note — never code.

Health information

The extension operates on protected health information that is already present in the user's eClinicalWorks session. It does not copy that information out of that session. MedReception AI's obligations for information handled through our platform are described in our Privacy Policy.

Data retention and deletion

The extension retains nothing, so there is nothing to retain or delete. Uninstalling it removes it completely.

Changes to this policy

Material changes will be published on this page with a new date, and the Chrome Web Store listing updated.

Contact

[email protected]