A person should decide what leaves the clinic, not a process

Two ways an image can leave a clinic

Every tool that shares scans with families works one of two ways. Some upload every image the machine captures to the cloud the moment the scan ends, then a staff member builds a share link from whatever landed there. Others let the person doing the scan pick the images first, so only the chosen ones ever leave. The gap between those two designs is small to describe and large in practice. One trusts a default to decide what leaves the building. The other puts a clinician in the decision.

PACSBridge is the second kind. The sonographer selects the images and cineloops at the ultrasound machine, at scan time. Only those go to PACSBridge. Nothing else is uploaded, and the machine never opens a path back into the clinic's network.

Curation is a clinical safeguard, not a limitation

A full ultrasound study is not a keepsake. It holds measurement frames, angles a parent was never meant to read alone, and images a radiologist may still need to review. Handing all of that to an anxious parent is not generous. It is a clinical risk, because an unreviewed finding can reach a family with no clinician between them and what is on the screen.

When the sonographer curates, that cannot happen by default. The family receives the images meant for them: the face, the profile, the moving cineloop, the moment. The rest stays in the clinical record where it belongs. The parent gets a better experience and the clinic keeps control of what it is comfortable releasing.

The privacy case for sending less

Every image that leaves a clinic is an image the clinic is now responsible for. Parents share scans widely, on phones and on social media, and identified images carry a re-identification and take-down burden that is hard to undo. The most reliable way to reduce that exposure is simple. Send less, and send only what was chosen. Fewer images leave, and the ones that do have been through a clinician's judgement first.

Control does not end when you press send

Choosing what to send is the first half of control. The second half is being able to change your mind. With PACSBridge the family views on their phone through a link, with no app and no account. If a study should no longer be accessible, the clinic can revoke that link at any time. Access is something the clinic grants and can withdraw, not something that is gone the instant it is sent.

That control reaches down to a single image. If one picture was released that should not have been, staff can delete that individual image from the study on the PACSBridge administration page, and it disappears from what the family can see. One limit is worth stating plainly. If a family has already saved a downloaded copy to their own device, deleting the image from PACSBridge cannot reach that copy, because it is no longer ours to reach. What the clinic can always do is stop the image being served again.

What PACSBridge holds, stated plainly

Control over what is sent is matched by restraint in what is kept. Before a keepsake reaches a family, the identifying text burned into the top of the ultrasound image is removed and replaced with the clinic's own branding. PACSBridge stores a patient ID and surname so the right images reach the right family, and only the clinic can turn that back into a named patient. It does not store the email address or phone number used to deliver the images. Everything is encrypted in transit and at rest. The handling is aligned with HIPAA in the United States and GDPR in Europe. It is a deliberately small amount of data, held deliberately carefully.