Clinical photos that:
Capture, redact and store them in an encrypted vault on your phone — then send them however you already work.
Also handles video, voice notes and documents.
In a camera roll, synced to the cloud, sitting between family photos — and sent on over WhatsApp, SMS or email. Here's what that costs you, and what EMMS does instead.
Every clinical photo you take lands in your phone's photo library and syncs to iCloud or Google Photos — where it can resurface in Memories, in a shared album, or on a family tablet signed into the same account.
Most physicians are sitting on thousands of patient images across their phone, email, and messaging apps — with no plan for when they'll be deleted.
Unencrypted channels put patient data on servers, carrier logs, and devices you don't control — and leave no meaningful audit of who saw what.
Clinical photos go straight into an encrypted vault on your phone — never the camera roll. Redact what shouldn't travel, then send it however your colleague actually works.
Shoot clinical images inside EMMS and they land in an encrypted store on your device. Nothing syncs to iCloud or Google, nothing surfaces in Memories, nothing is sitting in a shared album waiting to be noticed.
Documents, videos and voice notes sit alongside them — and everything clears itself on the schedule you set.
Crop, redact or annotate before anything leaves. Blur a name, an MRN or a date of birth on a printout; circle the finding you want a second opinion on.
Location and camera metadata are removed automatically, so the file carries no record of where it was taken.
Pick a destination. A colleague on EMMS, a group, or several people at once — all end-to-end encrypted. Or hand the files straight to WhatsApp, email or AirDrop if that is where your colleague lives.
If they don't have EMMS, it prepares an encrypted secure link and opens your own messaging app with everything ready to send by SMS — EMMS never sends on your behalf. They verify with a one-time code and view the files in a browser, with no app to install and no account to create.
A copy shared outside EMMS leaves its protection — it won't auto-expire, and screenshot alerts don't apply.
Bundle related images into a Clinical Case — title, context note and a voice explanation in one card (left) · Side-by-side compare with synchronised zoom and pan, for pre and post (right). Cases travel between EMMS users; send to a colleague without the app and the images arrive by secure link instead.
Content is encrypted on your device before it leaves. Our servers handle delivery and never see what's inside.
Images are captured straight into the app's encrypted store, so they never enter your photo library — and the app excludes its data from iCloud, iTunes and Google backups, so they don't quietly replicate to cloud storage either.
Encrypted on your device before it leaves, and decrypted only by the person you sent it to. We hold no keys and could not read it if we were compelled to. In a group, every member gets an individually encrypted copy — there is no shared key to lose.
Files clear from your device on the schedule you set, and leave our servers within seconds of the recipient collecting them. Phone numbers are stored only as hashes, never in plain text. Data minimisation you can point at, not promise.
Designed around clinical workflows, not adapted from a consumer messaging app.
Shoot a run of clinical images in sequence, review each one, then send the set — without a single frame touching your photo library. SD by default so it sends fast on ward wifi; switch to HD when fine detail matters.
Blur names, MRNs and dates of birth before anything leaves. Crop, redact and annotate without stepping outside the encrypted pipeline.
Everything you capture and receive, in one encrypted place — images, PDFs, documents. Search by label, filename or type, and label items to find them again.
Every item carries a countdown to deletion. Set the period that suits you, and mark the few things worth keeping as Keep Forever. Data minimisation, documented and defensible.
Group up to 5 images and 5 files into one card with a title, context note and a voice explanation. Opens in a viewer with pinch-to-zoom, brightness and contrast, and side-by-side compare. Cases need the structured viewer at both ends, so they travel between EMMS users — for anyone else, send the images and files directly and they arrive by secure link. Cases expire by design: export to your EMR if it belongs in the record. EMMS is the transport, not the chart.
Describe a finding or dictate instructions rather than typing it on a ward corridor. Encrypted like everything else.
Threaded 1:1 and group conversations with delivery and read receipts. Everything you have captured is already there to send — open a chat, attach, done.
End-to-end encrypted voice calls between EMMS users too, so the audio never crosses a carrier network unprotected.
Even if your device is lost, stolen, or compromised, patient data inside EMMS remains protected.
Turn on app lock to require authentication every time EMMS is opened. Supports fingerprint, face recognition, and PIN — independent of your device lock screen.
EMMS monitors for screen capture and recording and alerts you the moment it's detected. Operating-system limitations mean screenshots can't be fully prevented on all devices, so EMMS focuses on immediate detection and notification.
If your PIN is entered incorrectly, EMMS enforces a cooldown period. After repeated failures, the app locks down and offers a full data wipe to protect patient information.
All images and files are stored encrypted inside the app's isolated sandbox. Nothing is written to the camera roll, photo library, or any shared storage location.
If your phone is lost or stolen, sign in on a new device — the previous session is automatically revoked and all local data on the old device is wiped. No IT department needed.
EMMS closes the biggest practical gap most physicians have — a camera roll full of patient photos. It is not a regulated health record system, and using it does not by itself make you compliant with PHIPA, HIA, PIPA, or your College's policies on personal health information. Document clinical exchanges in the patient's record as you normally would.
Built around Canadian privacy principles. End-to-end encryption, ephemeral storage, hashed identifiers, and Canadian-only server infrastructure. The safeguards regulators and Colleges consistently expect of secure clinical communication.
Servers in Canada. Core infrastructure is hosted exclusively within Canadian borders. Limited delivery services (push notifications, SMS verification codes) operate through providers whose infrastructure may extend beyond Canada — but they never receive message or file content.
Minimal data collection. No phone numbers stored in plain text — hashed identifiers and delivery metadata only. Firebase handles push notifications; Twilio handles SMS verification codes. Neither sees your content. RevenueCat handles subscriptions and never receives clinical data.
Zero-knowledge architecture. Content is encrypted on your device before it leaves. We can't read it, can't share it, and can't be compelled to produce content we don't hold.
You still own documentation, consent, and the medical record. EMMS is the transport layer between you and a colleague. Your EMR remains the record of care. Document clinical exchanges, obtain consent where required, and integrate images into the chart the way you normally would.
The camera and the vault are free. You pay only when you send something encrypted through us. No advertising, no data monetization, no third-party access to your content.
All prices in Canadian dollars. The free tier is genuinely free, not a trial — capture and storage happen entirely on your device, so they cost us nothing to run. EMMS is funded by the physicians who use it — not by advertisers, data brokers, or third parties. No one else pays us, which means no one else has a claim on your data.
No IT setup. No admin provisioning. No email account required. Download the app, verify your phone number, and start sending — in under two minutes.
Quick answers to the questions we hear most from physicians and IT teams.