You'll notice
Useful2 Signal3
On HIPAA-entitled accounts, unrecognised telemetry fields are replaced with a placeholder before anything is sent.
What's wrong with this entry?
Anonymous. No account, no email.
What
On accounts whose entitlement includes "hipaa", a new pass checks every telemetry field against an allowlist before anything is sent and replaces anything unrecognised with a fixed hipaa_redacted placeholder.
Details
- Recognised shapes are matched by regex for UUIDs, session ids and version strings, and by fixed enumeration for platform, architecture and client type.
- Any string field not on the list is redacted wholesale rather than passed through.
- A helper emits a HIPAA notice at most once per terminal.
- Keyed on the "hipaa" entitlement check, so accounts without it are unaffected.
Evidence
hipaa_redacted
Strings lifted out of the shipped bundle, so the claim above can be checked against them.