Using a new or lost phone

Fresh phone, same account

Three things, in order:

1. Sign in. Open the app, type your email, click the magic link in your inbox.
2. Type your backup password. The app sees there’s no vault on this phone and prompts you for the password. Type it.
3. Wait a couple of seconds. Your phone fetches your cases and your patient names appear as the list loads.

That’s the full restore. No file to copy from your old phone, no backup file to email yourself.

If your old phone had Face ID or fingerprint enabled, the new phone will offer to enrol the same on this device after the first unlock. Each device has its own biometric setup.

Lost phone

Same as above — sign in on a replacement phone, type your backup password. The lost phone’s working copy becomes irrelevant; everything you need is on the servers and unlocked by your password.

Is the lost phone a risk?

The data on the lost phone is scrambled at rest, locked behind your phone’s screen lock. For someone to read it, they would need to:

• Bypass your screen lock, and
• Bypass the browser’s data sandbox, and
• Have either your backup password or grab the unscrambled key from running memory.

For a stolen-but-not-targeted phone: very low risk.

For a targeted theft (someone wants your data specifically): you should invalidate the lost phone’s connection. From a working device, go to Settings → Security → Reset vault. This wipes the secret key on the servers — the lost phone can no longer unlock its working copy from us. Your patient names will need to be re-entered (clinical content stays intact).

Multiple devices at once

You can sign in on a phone and a laptop with the same account. Each device unlocks separately with your backup password. Changes from one device show up on the other when you reload the case list.

What’s not yet built:

• Instant push from one device to another. Changes need a manual reload.
• A list of all your active devices in one place.

For most surgeons, one phone plus one laptop is fine. More than two devices and you’ll notice things lag.

A device showing old or blank patient names

Occasionally an older device — one that signed in before you’d finished setting up your backup password, or a long-dormant phone — ends up holding an out-of-date key. It still unlocks, but it can’t read the patient names the servers have, so cases show up blank or “Unnamed.”

This isn’t lost data — the names are safe on the servers under your current key. The device just needs the current key.

• The app usually catches it for you. When it notices a device can’t read your cases, it brings up the unlock screen explaining what’s happened, with a one-tap fix.
• Or fix it yourself: Settings → Backup & recovery → Resync. Enter your backup password if asked; the app figures out what’s out of step and puts it right — “Resynced — N names restored.”

There’s now a single Resync button. You no longer have to work out whether this device is behind or your other devices are behind, or pick between “re-sync this device” and “re-secure all cases” — the app detects which it is and does the right one for you. It always treats the servers’ copy as the source of truth, never deletes anything, and never changes your backup password. Running it when nothing is wrong does nothing — it’s safe to tap if you’re unsure.

Signing in on a borrowed device

Try not to. If you must:

1. Sign in.
2. Do what you needed.
3. Go to Settings → Sessions and revoke the session on that device.
4. Clear the browser data on exit.

This app is meant to be installed on a device you own.

If your email changes

There’s no self-service way to change your account email yet. Send an email to [email protected] with both your old and new addresses and your account will be moved.