Security by architecture

Patient data stays behind a trusted server boundary.

Recall is designed around practice isolation, minimum-necessary browser data, private storage, and auditable server-authorized actions.