Delete Your Care Ceylon Account
This page explains how Patients and Verified Doctors can permanently delete their Care Ceylon account (Android package org.rotaframe.careceylon) operated by RotaFrame Technology, and how your personal and clinical data is handled upon deletion.
Method 1: Delete Directly Inside the Care Ceylon App
Both Patient Mode and Doctor Mode include a built-in, two-step verified self-service account deletion workflow:
- 1Open the Care Ceylon mobile app and go to Settings → Delete Account (available in both Patient Mode and Doctor Mode).
- 2Review the pre-deletion summary (any active upcoming appointments are automatically cancelled and notified) and select a reason for leaving.
- 3Confirm your identity using your Account Password (or Google re-authentication) and enter the 6-Digit Email OTP sent to your registered email address.
- 4Tap Delete My Account. Your session is revoked immediately and your account enters the 90-day purge queue.
Method 2: Request Account Deletion via Email / Web
If you have already uninstalled the Care Ceylon app and wish to delete your account or specific personal data without reinstalling the app:
- 1Send an email from your registered Care Ceylon email address to info@rotaframe.org with the subject line
Care Ceylon Account Deletion Request. - 2Include your full name, registered phone number, and whether you are requesting deletion of a Patient, Doctor, or Dual-Role account.
- 3Our Data Protection Officer (DPO) team will verify your ownership via a one-time email confirmation and process your deletion within 7 business days.
What Happens to Your Data When You Delete Your Account?
In compliance with the Sri Lanka Personal Data Protection Act (PDPA) No. 9 of 2022 and healthcare medico-legal recordkeeping standards, Care Ceylon applies the following retention schedule:
To protect patients and doctors from accidental deletion, an encrypted snapshot is held for 90 days before automated permanent purge (`purge_expired_account_backups`).
Past consultation notes and prescriptions are anonymized so personal identifiers are removed while preserving statutory clinical audit integrity.
As soon as deletion is confirmed, your login session is revoked, upcoming bookings are cancelled, and Doctor profiles are removed from public search.
| Data Category | Examples | Action Upon Account Deletion | Retention Window |
|---|---|---|---|
| Account Profile & Login Credentials | Full Name, Email Address, Phone Number, Password Hash, OAuth Tokens, Avatar Image | Deactivated immediately; permanently purged after 90-day recovery window | 90 Days (Encrypted Recovery Backup) |
| Uploaded Patient Medical Documents | Uploaded PDFs, Lab Reports, Diagnostic Scans in private storage | Access revoked immediately; permanently deleted from storage buckets after 90 days | 90 Days |
| Doctor Verification Documents | Uploaded Medical License scans, Digital Signatures, Official Stamps | Removed from active verification; purged after 90-day recovery window | 90 Days |
| Historical Clinical & Prescription Logs | Past Consultation Records, Issued Prescriptions, Dispensing Logs | De-identified / Anonymized (personal identifiers scrubbed) to preserve medico-legal continuity for the counter-party patient or doctor | Statutory Medical Record Retention (Sri Lanka PDPA & Healthcare Guidelines) |
| Financial & Tax Settlement Invoices | Consultation Payment Receipts, Doctor Payout Ledger Entries | Retained in restricted accounting ledger as required by Sri Lankan tax & financial audit regulations | Statutory Tax Audit Period |