# A guide to patient data in your calls and webhooks

- Date: 2026-11-01
- Type: New
- Surface: Developer portal and CLI
- What you need to do: Nothing.
- Address: https://developers.rivr.io/changelog/2026-11-01-guide-patient-data

The new guide Patient data in your calls and webhooks (/guides/patient-data) shows where patient data lives in an integration. The personal number you send when you create an order is not returned in any webhook; only a full order read in `/api/public` gives it back, in clear text. `reference` and `metadata` come back unchanged in every order webhook, are not masked in logs and are not cleared when an order is erased, so never put patient data in them. An order webhook carries no name, personal number, contact details, amount or order lines. Patient data sits behind `customers:read`, which Rivr classes as health data; `orders:read` alone gives only the order's id and status. The guide also covers the treatment text that can be hidden per clinic and how a protected identity is masked.