Most telehealth visits are not recorded by default. The standard practice for virtual healthcare appointments is the same as for in-person visits: your provider takes notes during or after the session, and those notes become part of your medical record. The video or audio itself is typically not saved. However, there are important exceptions, and new AI tools are changing what “recording” looks like in a medical visit.
Why Most Visits Aren’t Recorded
When you see a doctor in person, nobody videotapes the appointment. Telehealth generally works the same way. The platforms used for virtual visits, such as Zoom for Healthcare, Doxy.me, and systems built into patient portals like Epic MyChart, have recording features, but these are typically disabled for clinical sessions. Zoom’s integration with Epic, for example, allows healthcare organizations to turn off recordings, annotations, and other features specifically for security reasons.
There’s also no financial incentive to record. Medicare and major insurers do not require providers to save a video or audio file of a telehealth session as a condition for reimbursement. What matters for billing and documentation is the clinical note your provider writes, not a recording of the conversation itself.
Storing video files would actually create significant headaches for healthcare organizations. HIPAA requires covered entities to apply reasonable safeguards to protect health information from unauthorized access. Video files are large, expensive to store securely, and create additional targets for data breaches. The U.S. Department of Health and Human Services has specifically flagged the risk that recordings or transcripts from telehealth sessions could be accessed by unauthorized third parties, and notes that encryption should be evaluated for any recordings that are created or stored. Most practices avoid this problem entirely by simply not recording.
When a Visit Might Be Recorded
There are situations where a telehealth session could be recorded, but they almost always require your knowledge. State laws vary on consent requirements for recording conversations. Some states require only one party to consent (the provider), while others require all parties to agree. Regardless of state law, healthcare organizations generally have their own policies requiring patient notification before any recording begins.
Scenarios where recording might happen include:
- Training and quality assurance. A provider or institution may want to review sessions for training medical students, residents, or staff. You would typically be asked to sign a consent form beforehand.
- Your own request. Some patients ask to record visits so they can review instructions later. Whether this is allowed depends on your provider’s policy and your state’s recording laws.
- Specialized clinical documentation. Certain types of evaluations, such as psychiatric assessments or disability examinations, may involve recording as part of the formal documentation process. Again, this should involve explicit consent.
On most major telehealth platforms, a visible indicator appears when recording is active. Look for a red dot, a “Recording” label, or a notification banner at the top of the screen. If you’re unsure whether a session is being recorded, you can ask your provider directly.
AI Scribes: A New Kind of Listening
One increasingly common practice blurs the line between “recording” and “note-taking.” Many healthcare providers now use AI-powered ambient scribes, software that listens to the conversation in real time and generates a draft of the clinical note. These tools are designed to reduce the documentation burden on doctors, who often spend hours after clinic writing up their notes.
AI scribes listen to the patient-provider conversation during the visit and then produce a structured clinical note for the provider to review, edit, and approve. In many cases, the audio itself is processed and then deleted rather than permanently stored. But the technology does involve capturing and transmitting your spoken words to a software system during the appointment, which is functionally a form of recording, even if temporary.
These tools aren’t perfect. Evaluations of standalone AI transcription tools have found potentially high rates of errors, including incorrect information, omissions, and what researchers call “hallucinations,” where the system generates content that was never actually said. Security experts have also raised concerns about the risks of large language models accessing and modifying sensitive patient data. If your provider uses an AI scribe, they should inform you at the start of the visit and give you the option to decline.
What Gets Stored in Your Medical Record
Even when a telehealth visit isn’t recorded as video or audio, a detailed record of it still exists. Your provider documents the visit in a clinical note that includes the reason for your visit, symptoms discussed, examination findings, diagnoses, and the treatment plan. This note is stored in your electronic health record and is subject to standard medical record retention rules.
Under HIPAA, Medicare fee-for-service providers must retain required documentation for six years from the date it was created or last in effect. Providers submitting cost reports to Medicare must keep patient records for at least five years after the cost report closes. For Medicare managed care providers, the retention period extends to ten years. State laws may impose their own requirements that are longer or shorter, meaning your records from a telehealth visit could be kept for a decade or more, just not as a video file.
How to Protect Your Privacy
You have more control over your telehealth privacy than you might think. Before your appointment, check the consent forms or terms of service for your telehealth platform. These documents should disclose whether sessions may be recorded or whether AI transcription tools are in use. If you signed up for a patient portal, the telehealth consent is often bundled into the initial paperwork.
During the visit, pay attention to any recording indicators on screen. If your provider mentions using an AI scribe or any recording tool, you can ask how the audio is handled: whether it’s stored permanently, deleted after processing, or transmitted to a third party. You’re within your rights to ask that the tool be turned off.
Your provider is also required to conduct the visit with reasonable privacy safeguards. Federal guidance from HHS expects providers to use private settings when possible. If a provider is in a shared space, they’re expected to take steps like lowering their voice and avoiding speakerphone. The same consideration applies on your end: joining from a private room protects your own information from being overheard by others in your household.