Consent gates that still let refill analytics breathe

Pharmacy teams sometimes freeze analytics work because they fear any counting violates patient trust. The opposite failure also appears: events fire before a patient has agreed to measurement.

A workable split

• Essential operational logs needed to dispense safely stay inside pharmacy systems under existing clinical rules.
• Behavioural analytics used to improve the app’s refill journey require a clear consent moment and must not leak counselling content into marketing properties.

During Instrumentation Health Checks we often find “refill started” events firing on app open rather than on an authenticated refill request after consent. Fixing that single gate usually does more for trust — and for trustworthy charts — than adding five new screens.

We are not your legal counsel. Align final consent copy with your PDPA advisor; our job is to keep the counters honest once the legal line is drawn.