Accepting new patients (fictionally)
Primary care, pediatrics, telehealth and behavioral health.
Loam & Key is a made-up family practice with a very real website, built so your health information never touches it. Learn about care, meet the providers and request a call back. Anything about your health goes through the secure patient portal.
This is the healthcare showcase: every card here is a real build decision.
Security isn't a badge in the footer. It's a set of decisions about what a healthcare website is allowed to do.
Forms ask only how to reach you. Symptoms and records stay in the patient portal.
Reading about a condition shouldn't follow you around the internet.
Only signed-in staff with a website role can change content. The data API is closed to the public.
Integration keys never reach the browser, and pages are scrubbed before they leave.
Dependencies, vulnerabilities and integrations checked monthly, with a report to the practice.
Loam's compliance review maps the practice's systems to the HIPAA Security Rule and SOC 2.
Annual checkups, sick visits and ongoing care for adults, with the same provider who knows your history, visit after visit.
Read more
Well-child visits, school and sports physicals and sick visits, from newborns through the teenage years.
Read more
Video visits for follow-ups and common concerns, through the practice's secure patient portal, never a public video link.
Read moreA plain map of the data flow. Patients rarely get one.
General information, providers and a call-back form. No health details, ever.
Messages, intake forms, results and telehealth, inside a HIPAA-covered system.
Your chart, in the practice's electronic health record, never on the website.
No ad trackers following me around after I read about a health condition. That alone earns five stars.
Mark Upton
Web developer and patient · (fictional customer)
They have a whole page explaining where my information goes. Most real practices don't.
Tess Ting
Privacy-minded patient · (fictional customer)
I booked my kid's sports physical in a minute and the forms page told me exactly what to bring.
Sam Ple
Parent of two (fictional) · (fictional customer)
The website told me NOT to put my symptoms in the contact form and sent me to the secure portal instead. I've never trusted a fake clinic more.
Lauren Ipsum
Imaginary patient · (fictional customer)
Request a call back, then finish everything else securely in the patient portal.