Privacy Policy
This portal is operated by the Public Health Department, Government of Maharashtra under the National Health Mission. This policy explains what personal data NalamMesh handles, where it is stored, and when it leaves the device it was recorded on.
Where health data is stored
NalamMesh is an offline-first application. Patient records, triage results, referrals, the OPD queue, appointments and medicine stock are stored on the device of the facility that records them, in the browser database (IndexedDB), so care continues without a network.
A signed-in session locks after a period of inactivity and asks for the staff member's PIN again. On the Android app, this data is excluded from phone backups and device transfers, and patient screens are kept out of screenshots.
When data leaves the device
Referrals. When a patient is referred, the referral is sent through the department's referral relay to the receiving facility, and the patient's record is uploaded to the district reporting service so the receiving team can prepare before the patient arrives. That record identifies the patient. It is available only to signed-in staff whose role and posting allow it.
ABHA verification. When a citizen verifies an ABHA number, the number and the one-time password are sent, through the department's relay, to the Ayushman Bharat Digital Mission, which checks them. This portal does not keep a citizen account.
Voice input and translation. When staff use voice input or translate a referral note, the audio or text is sent, through the department's relay, to Bhashini (Ministry of Electronics and Information Technology) for processing.
The assistant. Questions the assistant cannot answer on the device may be sent to a cloud language model chosen by the department, which may be run by a third party. Phone, Aadhaar and ABHA numbers and email addresses are removed from a question before it is sent; names cannot be, so do not type them.
Information we do not collect
The portal does not use advertising trackers or third-party analytics. Fonts and map assets are part of the application, so no third-party server is contacted to display a page. It does not collect personal information from a visitor browsing the public pages, beyond what your browser normally sends to any website.
No payment information is collected anywhere in this application.
Access and accountability
Clinical modules are restricted by staff role (ANM / Nurse, Medical Officer, Specialist Doctor, Hospital Admin / Bed Manager, District Health Officer, Super Admin) and by the facility the staff member is posted to. Staff sign in with a personal PIN; five wrong PINs lock the account for five minutes.
Changes to referrals, queue entries, appointments, medicine stock and sign-ins are recorded in an audit trail with the acting staff identifier and a timestamp. The audit trail records the identifier of the record changed, not a duplicate copy of patient identity.
Digital Personal Data Protection Act, 2023
Personal health data is processed to deliver public healthcare services. The application stores the clinical fields needed for care and shares a patient's record only for that patient's care, as described above.
You may ask to see the records held about you, ask for them to be corrected, or raise a grievance about how they were handled, by contacting the Nodal Officer listed below. Records are kept for the period the department's record-retention rules require.
Contact
Chief Medical Officer, District Health Office, Ahilyanagar — Nodal Officer for this portal.