The question isn’t cloud or not — it’s who holds the key
“Is it in the cloud” is the wrong question. The right one is: is it encrypted before it reaches the cloud, so the provider only ever stores ciphertext? Plenty of “secure cloud storage” means the data sits decrypted on the provider’s server, readable any time — which is very different from storage where the server never holds a plain-text copy in the first place.
Cloud vs on-device storage, honestly compared
Pure cloud storage depends on a connection and trusts the provider not to look, get breached, or hand data over on request. On-device storage with encrypted, opportunistic sync gets the backup and multi-device benefit of the cloud without the record ever existing in readable form anywhere but your device.
What to check before trusting a provider with health data
- Does it mention encryption “at rest” and “in transit,” or specifically on-device before upload?
- Does the privacy policy mention sharing data with “partners,” “affiliates” or “research”?
- Can you export everything and delete your account, fully, at any time?
- Does it work at all without an internet connection?
How MedKeep handles this specifically
MedKeep encrypts every record with AES-256 on your device before it’s ever stored or synced, so what reaches our servers is always ciphertext, never plain text, and reading it isn’t part of how the app operates. Sync happens automatically when you’re online, but nothing depends on it; the record works fully offline too.
Frequently asked questions
Is it safe to store medical records in the cloud?
It depends heavily on whether the data is encrypted before it reaches the cloud, and whether the provider ever stores or processes it as plain text once it arrives. Encryption applied only in transit is much weaker than on-device encryption paired with ciphertext-only storage.
What’s the difference between cloud storage and on-device encrypted storage?
Cloud storage alone trusts the provider not to read your files. On-device encryption means the record is unreadable before it ever leaves your device, so what reaches the provider’s servers is already ciphertext.
How does MedKeep protect health data specifically?
AES-256 encryption applied on your device before storage or sync, so data on MedKeep’s servers is always ciphertext — reading the content of your documents isn’t part of how the app operates.
Try it with MedKeep — free
Your whole family's medications, vitals, visits and documents. Encrypted on your device, works offline.