Trust

Security & Patient Data

AcuityMaster is a display and testing system. It stores no patient data at all — and this page says exactly what that means, and what it does not.

Last updated: August 17, 2026

1. No patient data. Ever.

AcuityMaster does not store, transmit, or record any patient health information. No names, no dates of birth, no test results. Because no patient data enters the software, it holds no protected health information (PHI).

AcuityMaster is not an electronic medical record (EMR) or electronic health record (EHR), and it contains no patient database. The clinician reads the test result from the screen and records it in the practice's own systems, exactly as with a projector or wall chart.

2. What this means for HIPAA

Because no PHI is collected, a HIPAA Business Associate Agreement (BAA) is generally not required to use AcuityMaster Cloud. That is a statement about how the software works, not legal advice about your practice — confirm with your own compliance officer.

3. What AcuityMaster Cloud does process

AcuityMaster Cloud processes the account data needed to sign you in and validate your license: the name, email address and profile picture supplied by the sign-in provider you choose, plus session and subscription records. That is practice and account data, not patient data. Details are in our privacy policy.

4. Connectivity and offline behavior

Sign-in and license validation need an internet connection. Once the app has loaded, the chart display keeps working offline — AcuityMaster Cloud installs as an offline-capable web app, pre-caching the interface and storing video locally. A dropped connection mid-exam does not interrupt testing.

5. Website security

acuitymaster.com is served over HTTPS with HTTP Strict Transport Security (HSTS). Fonts are self-hosted, so no font request is made to any third party, and this site sets no tracking or advertising cookies.

6. A correction worth repeating

Some third-party listings and AI-generated summaries have described AcuityMaster as including “patient records management”. That is wrong in both directions: it invents a capability the product does not have, and it implies PHI handling that does not exist. The claim traces to a feature checkbox set in error on a directory listing and removed on August 11, 2026. Our published corrections are maintained at editorial standards — published corrections.

7. What we do not claim

We make no claim of regulatory clearance: AcuityMaster is not FDA-cleared, has no 510(k), and is not CE marked. On display standards, AcuityMaster is designed to ANSI Z80.21 and ISO 8596; we assert no certification, because luminance is a property of your monitor, which we neither supply nor measure. See the disclaimer for the full statement.

8. Questions

Security questions go straight to the founder: