How do I keep a parent's medical and insurance documents on my phone?

Your mother calls from the emergency room and cannot find her insurance card. The pharmacy asks for your father’s date of birth and the name of a drug you cannot pronounce. A form wants a copy of the power of attorney today. If you care for a parent, your phone becomes the folder for their life. This page covers what to keep and what the law lets you see. It also shows how to guard the numbers that scammers want, and how to share the folder with siblings. We checked each fact against HHS, the FTC, GOV.UK and Apple on 2026-10-08.

What to keep on your phone

Start with what people ask for at short notice:

• Insurance cards, front and back, including a Medicare card or a supplement plan card.
• A current medication list, with doses and the prescribing doctor.
• Allergies and conditions, in one short note.
• Doctors and the pharmacy, with phone numbers and addresses.
• Legal papers: the health care power of attorney, a financial power of attorney, an advance directive or living will.
• Recent visit summaries and test results, as PDFs or photos.

Update the medication list each time a dose changes.

What the law lets a caregiver see

In the US. HHS explains who counts as a “personal representative” under HIPAA. “If a person can make health care decisions for you using a health care power of attorney, the person is your personal representative.” A covered provider or health plan “must allow your personal representative to inspect and receive a copy” of the person’s health information. HHS adds that “state law may affect this process”.

HHS also lists an exception. A provider may refuse to treat someone as a representative if it reasonably believes that person “might endanger” the patient.

In England and Wales. GOV.UK describes two kinds of lasting power of attorney: “health and welfare” and “property and financial affairs”. The steps end with registration at the Office of the Public Guardian, which GOV.UK says takes 8 to 10 weeks. Keep a scan of the registered document, and know where the original is.

A scan on your phone shows what the paper says. Ask the hospital or the bank what form of the document they accept.

Guard the numbers scammers want

Scammers want Medicare numbers. The FTC says: “Don’t share it over the phone with anyone for any reason”. Scammers “ask for Medicare numbers to ‘verify your identity’ or to offer you ‘new plastic cards.’” The FTC answers: “Medicare won’t call you to verify your card, and Medicare cards are paper, not plastic, and they’re free.”

Check each Medicare statement against your notes. The FTC says to call the doctor or the plan about double charges, or charges for things your parent did not get. If you suspect health care fraud, it points to your state Senior Medicare Patrol.

If someone used your parent’s details to get care, the FTC says to get copies of the medical records from each doctor, hospital and pharmacy involved, and correct the errors. Then report it at IdentityTheft.gov, which gives a recovery plan. Your scans of the real cards and visit summaries help you spot what does not belong.

Why the camera roll is the wrong folder

A photo of a Medicare card in the camera roll goes wherever the camera roll goes. With iCloud Photos on, it is on every device signed in to your Apple Account, including a shared family iPad. Apple’s iCloud overview lists Photos under standard data protection, where Apple holds the keys. Advanced Data Protection changes that.

The law does not help here either. HHS says the HIPAA Rules “generally do not protect” health information “stored on your personal cell phones or tablets”. Your phone copy of a parent’s records is yours to protect.

A caregiver folder in York Vault

York Vault keeps documents behind its own code, on iPhone and Android. Items stay on the phone unless you turn on Optimize phone storage. So the folder opens without a signal in a hospital basement.

• Scan, do not photograph. The document and card scanner saves papers as PDFs and pairs the front and back of each card. Nothing goes to Photos.
• Show a card at the desk. The IDs and cards view opens a card full screen, with the brightness up.
• Copy a policy number. A copied number stays on this phone and clears after 60 seconds.
• Expiry reminders. Set one for an insurance card. The reminder does not name the card.
• The medication list as a note. Keep it as an encrypted note with a checklist, next to the scans. See notes and voice notes.
• One album per parent. Give each album its own album code if more than one person uses the phone.

Your folder backs up encrypted to your own iCloud or Google Drive. Viewing and export stay free on every plan. See what stays free.

Share the folder with siblings

Caring is rarely one person’s job. A group chat full of insurance photos leaves a copy of every card on every phone, in every chat backup.

A shared album keeps one set of documents that each of you opens in your own York Vault, with your own code. It works between iPhone and Android. Only the person who creates the album needs Pro. Everyone else joins on any plan, Free included. You choose if others can add items or only view them.

If a sibling needs one document once, send a private share link that expires instead.

For your own ID copies, read photos of your passport and ID on your phone. For your own health photos, see medical photos on your phone.