This is health information, and the bar is higher
A client name sitting next to an appointment type in an allied health calendar is already sensitive information under the Privacy Act, because it reveals that the person is receiving that kind of care. State legislation such as the Victorian Health Records Act 2001 and the New South Wales Health Records and Information Privacy Act 2002 adds further obligations, and health records carry retention periods that outlast most software contracts. We move only the fields a task genuinely needs, never bulk copy clinical notes into anything, scope credentials to the minimum, encrypt every connection, and document what flows where so you can answer a client, an auditor or your indemnity insurer without guessing. To be clear about what this page is: it is general information about how we design, not legal advice. What applies to you depends on your state, your profession and your registration, and we build to the obligations you and your own adviser confirm.
The automation does no clinical work, ever
It does not assess, triage, diagnose, advise, interpret a symptom or judge urgency, and we will not build it to. Those are your registration and your professional judgement, not a piece of software's. What it does is administrative: take details, offer a time, send a reminder, draft a routine letter for you to check. Where a caller sounds distressed or describes risk, the design is deliberately blunt: stop the automated flow, say plainly that a person will help, direct anyone in immediate danger to emergency services on triple zero, and get a human involved on the terms you set. We would rather the automation hand over too often than once too late.
You cannot confirm who someone is, or what they are booked for, to an unverified caller
Allied health gets calls from separated parents, adult children, partners, employers and insurers, and confirming that a person even attends your practice can be a privacy breach in itself. We build identity checks into the front of every flow and set explicit rules on what may be discussed with whom: what a parent of a mature minor may be told, who is on a client's authorised contact list, and what is withheld until a human has checked. The default is always to say less and pass to a person, because there is no undoing an unauthorised disclosure.
Item numbers and funding rules are never guessed
Getting a claim wrong is not a small error. It is money out of the client's pocket, a compliance exposure for you, and a claim that will be recovered later. The automation never chooses an item number and takes no part in Medicare claiming. It applies only the rules you have given it in writing, such as who an invoice goes to, and only to the situations you have approved, and where anything is ambiguous it stops and asks a person rather than choosing. The same discipline applies to whether a short-notice cancellation is chargeable, and to NDIS invoicing, where the rules are set by the scheme and change, not by us. We build the workflow. You own the clinical and billing decisions inside it.
Reminders reduce non-attendance, they do not eliminate it
Anyone promising to end no-shows is selling you something. What genuinely moves the number is a confirmation loop rather than a broadcast, an easy way to reschedule at nine at night, escalation to a real call for the appointments most at risk, and a cancellation policy you actually apply. The other trap is volume: if Power Diary is already sending reminders and we add another layer, clients get messaged twice, tune out, and opt out, which costs you the channel. We audit what is already going out first and consolidate it, rather than stacking messages on top.
One calendar, one source of truth, and honest limits on what we can reach
The fastest way to break a practice is a second place where appointments live, so Power Diary stays the single source of truth and everything we build reads from it and, where its API allows, writes back to it rather than keeping a shadow copy. That also means the reach of any flow is bounded by what Power Diary exposes to an outside system. Its API is still in beta and booking access through it is not confirmed, so the honest answer differs field by field. Appointment types and durations, practitioner availability, client contact details and invoice status are the fields we most want. Clinical notes are the opposite case: we deliberately never pull them out at all. We establish what is genuinely reachable during discovery and tell you plainly, then design around the gaps rather than promising a connection and quietly delivering a manual step. We also pace and queue everything we do, so a busy Monday morning never floods the system your whole day runs on.