When it already happened
Your own notes are not automatically private
What to do with notes, texts, and screenshots you already saved—and why a cleaner-looking version is not the goal.
9 min read built on 6 full opinions updated 2026-09-13
Written by a med-surg RN, ten years, day shift. Why there is no name on it

You saved a screenshot, texted a coworker, or wrote your own account of a difficult shift. Now you want to know who could see it. Stop sharing it. Do not start deleting, rewriting, or moving things around on your own.
The short version
- Personal storage does not guarantee privacy. Notes, texts, and screenshots may be requested in litigation if they are relevant. Being outside the chart does not put them out of reach.
- Do not clean up the originals. Get prompt instructions on secure handling and preservation. Do not delete, crop, or replace files on your own.
- Put missing care information in the clinical record. Use the approved correction or late-entry process and the actual entry time.
- Report misplaced patient information through the privacy process. Explain what happened without making another unnecessary copy.
- Keep personal learning notes general and nonidentifying. A reminder to review a procedure is one thing. A private, patient-by-patient backup chart is another.
What goes wrong
It is easy to mistake outside the chart for outside the record of what happened.
Your phone note might include observations you never passed along to the care team. Your text might make an accusation the chart does not support. A screenshot might capture only part of a conversation. Keeping these things to yourself does not stop someone from requesting them as evidence.
Three separate questions tend to get lumped together:
- Confidentiality: Who is allowed to see or receive the information?
- Discoverability: Can relevant information be obtained through litigation?
- Legal protection: Does a particular protection limit disclosure?
An approved secure system addresses access and security. It does not settle the other two questions. But a request for information does not automatically give someone access to everything on your phone, either. Take questions about a specific request to qualified counsel.
A separate account creates a more immediate problem: now you have two versions to reconcile. One says you notified the provider. The other says you sent a message and got no response. Those are not necessarily the same event.
An honest correction keeps the original, identifies the error, and explains the change. Quietly replacing it with a polished version loses that explanation.
What nobody tells you
- A chat is not necessarily a chart entry. Your system and its configuration determine whether messages are retained, become part of the medical record, or appear in another view. Ask informatics or health information management how it works at your facility.
- Sent, delivered, read, and responded are different. Document the status you actually know. A read indicator does not tell you what the clinician understood or what they did.
- A screenshot creates another file. It may also sync to cloud storage or another device, depending on your settings. Tell privacy/IT about possible copies. Do not move files around trying to investigate it yourself.
- The original can matter more than the picture. A screenshot may leave out part of the conversation or technical information attached to the original messages. If an issue comes up, identify the source device and application. Do not assume the screenshot is enough.
- A missing entry needs a system check, not a reconstruction passed off as the original. Ask your designated EHR support team to check the entry’s status and available audit information. If you need a late entry, label it as one.
It is not hypothetical
Rossbach v. Montefiore Medical Center — U.S. Court of Appeals for the Second Circuit, 2023
A registered nurse brought employment claims against her hospital and supervisors. One central piece of evidence was an image she said showed text messages from a supervisor.
The district court found that she fabricated the messages, testified falsely about how they were created, and failed to preserve evidence to conceal the fabrication. The examination covered the image’s technical characteristics, its metadata, and inconsistencies in her account of the phones involved.
The appellate court upheld the dismissal and the sanction against the nurse. It vacated the sanctions against her attorneys and sent that issue back because the wrong legal standard had been applied.
This was not a nurse being penalized simply for saving messages. The case concerned fabrication, false testimony, and the handling of original evidence. Keep that distinction clear.
Nuvasive, Inc. v. Absolute Medical, LLC — U.S. Court of Appeals for the Eleventh Circuit, 2023
In a medical-device business dispute, discovery turned up texts sent to a witness while he was testifying in an arbitration. His testimony appeared to match answers suggested in those messages.
The district court set aside the arbitration award on fraud grounds. The appellate court affirmed.
The lesson is narrow: messages outside the formal proceeding became evidence about what happened inside it.
These were employment and business disputes. Neither means that every nursing worksheet, incident report, or secure chat must be disclosed.
What to write instead
These are invented examples of realistic wording, not quotations from actual records. Use only facts you can support. The right-hand column shows wording for a new entry or report. It is not permission to overwrite an existing one.
Personal phone note: MD ignored the low BP. Keeping this here to protect myself.
Chart late entry, if accurate: Late entry entered 09/13 at 09:15 for care at 02:10: BP 82/46; HR 122. Rapid response activated at 02:11. Dr. Lee notified by telephone at 02:12 and stated he was coming to bedside.
Chart: MD aware via Epic.
Chart: 14:05 secure chat sent to Dr. Lee reporting new nausea after oral medication. No acknowledgment received by 14:15; office called. At 14:18, Dr. Lee returned call and stated he would review medication orders.
Coworker text: Room 412 is a nightmare. Refused everything again.
Chart the relevant care facts instead: 10:00 patient declined scheduled acetaminophen, reporting pain 0/10. Medication not administered.
Personal reminder: Screenshot saved in case the chart changes.
Approved privacy-reporting channel, not a routine clinical note: At 16:20, I captured an EHR screen on my personal phone. The image includes patient identifiers. I have not sent it to anyone. Requesting instructions for secure handling and preservation.
Existing chart entry with the wrong time: 09:00 Dr. Lee notified by telephone.
Approved correction: Correction entered at 11:05: The earlier entry misstated the notification time. Dr. Lee was notified by telephone at 09:20, not 09:00.
Personal learning notebook: Room 412, Smith, septic patient whose family threatened a lawsuit.
General learning note: Review the sepsis escalation pathway before the next shift.
The first row is not the full care record. You still need to document the assessment, interventions, and response that followed. The example shows how to label a late entry and keep observations separate from accusations.
If you cannot verify an exact time, do not invent one. When your documentation process allows an estimate, identify it as approximate.
For personal learning notes, remove the patient story, not just the name. A room number, date, unusual diagnosis, and distinctive event may still identify the patient. Keep patient-specific follow-up in an approved work system.
Workplace concerns need the right destination, too. Use the appropriate reporting process for a factual account of staffing, harassment, or a safety concern. It does not automatically belong in the patient’s chart. Do not build a personal archive of patient records to support it.
Words that do the damage
| Wording | Why it creates confusion | Replace with |
|---|---|---|
| For my protection / just in case | Explains your motive, not the care provided | The observation, action, notification, and response |
| MD ignored me | Assumes intent | Message sent at 14:05; no acknowledgment by 14:15; office called |
| Provider aware | Does not identify what was communicated or confirmed | Name, time, method, information reported, and actual response |
| Refused everything | Turns one event into a blanket claim | Name the specific medication or intervention declined |
| Always / never | Makes a claim beyond the event you observed | The specific event and time |
Do not go back and make an existing message sound nicer. Leave the original alone. Use the proper process for any clarification you need to make.
What the guidance says
- Keep identifiable patient information confidential, whether it is on paper, in an electronic file, or in an image. (NursingEducation, Credenza)
If it already happened
- Handle any current patient-care problem first. If an unanswered message concerns a patient getting worse or another unresolved care need, use the appropriate clinical escalation pathway now. Get care moving before you sort out the screenshot.
- Stop sharing and leave the originals unchanged. Do not forward the material to yourself, crop it into a better version, replace the original, or delete it on your own. Get prompt privacy/IT instructions on secure handling, preservation, and any authorized removal.
- Contact the right person through an approved channel. For patient information on a personal device, contact the privacy office or designated incident-reporting contact. For a documentation problem, involve the appropriate supervisor and health information management or EHR support. You can start with: I saved patient information outside the approved system. It is on my personal phone. I need instructions for securing it and handling any copies.
- Explain what exists without making another patient-data archive. Report the type of material, where it is stored, when you created it, whether you shared it, and whether it may have synced elsewhere. Do not attach the screenshot to an ordinary email just to show what happened.
- Correct the clinical record openly if it needs correction. Use the approved amendment or late-entry process. Keep the actual entry time and identify the care time separately. Include only facts you can support. Keep the privacy investigation and employment grievances out of routine clinical documentation unless they are clinically relevant.
- Be direct about anything you already changed or deleted. Tell the designated team what you did and when. Do not recreate a missing original or attempt a recovery yourself that could change the source. For example: I deleted the image from the phone at approximately 18:00. I do not know whether a cloud copy remains.
- Pass along formal requests and preservation notices promptly. If litigation, an investigation, or a request for your personal-device contents is involved, get qualified advice through counsel or your professional liability insurer. Follow the applicable preservation instructions. Do not improvise a response or send an entire phone backup.
That may mean an uncomfortable call and extra work after your shift. But it leaves a traceable account of what happened and what you did next, rather than a cleaner-looking version you have to explain later.
If you remember one thing
Keeping something for yourself does not make it private. If it already exists, secure it, report it through the right process, and correct the record without rewriting the past.
Read the decisions yourself
Every case below is a published decision on CourtListener. Open them. Nothing on this page asks you to take our word for what a court said — and where we only had the search result rather than the full opinion, it says so.
- Rossbach v. Montefiore Medical Center
- Nuvasive, Inc. v. Absolute Medical, LLC
- L. H.-S. v. N. B.
- Seth Steidinger v. Blackstone Medical Services
- Katherine Louise Carter v. Wake Forest University Baptist Medical Center
- St. Jude Medical S.C., Inc. v. Janssen-Counotte
All the decisions behind this guide, in one page — searchable by court, year, or what happened.
What people say on the floor
Nurses talking to each other about this, quoted as they wrote it. This is opinion, not a source. It is here because it shows what the argument actually is — the rules above come from the decisions and the published guidance, not from these threads.
My department was involved in a lawsuit where a nurse's note said something like, "informed surgeon by Epic secure chat." Because it was referenced, the attorneys then subpoenaed all the Epic chats involving that nurse that shift.
r/nursing on Reddit: epic chat question reddit779 votes, 272 comments. Did you guys see the TikTok’s about the nurse from Arkansas that was fired for posting a person she knows MyChart in her…
r/nursing on Reddit: Nurse fired for posting in CF redditThe OR nurses will monitor the surgeon's phones and will reply for them. One of the neurologists has his Epic chat set up so that he's always available and it comes through to his cell phone as a text message - I absolutely love that. Very secure and I can send full details instead of vagu
r/nursing on Reddit: Texting Providers with Personal Cell Phone redditNursing notes and any other provider ... hi-tech. I work back end now, but even the notes we put into the billing systems are releasable to the patient and discoverable if there were a lawsuit....
r/nursing on Reddit: FYI nursing notes will be released to patients in the very near futur reddit
What everyone else says
Guidance from professional bodies, insurers and other people who write about this. Useful, but it is advice, not law — that part is above.
- Silver Spring, Maryland 2010 ANA’s Principles for Nursing Documentation nursingworld.org
- Fundamental charting principles for nurses | NSO nso.com
- How to protect yourself from malpractice nursingcenter.com
- What Are the Best Practices for Nursing Documentation? | NursingEducation nursingeducation.org
- What is Privacy and Confidentiality in Nursing? (PLUS, Importance, Key Principles, & How t nursingprocess.org
- 5 Key Legal Obligations for Nurses in Patient Documentation vervecollege.edu
- Ensuring Patient Confidentiality in Nursing CEU - Nursing CE Central nursingcecentral.com
- Patient Privacy: Nursing Guide | Credenza credenzahealth.com