What should I check at the end of a shift on my phone?

Your phone can make a shift easier: it may help you check an approved rota, receive an authorised alert or complete a handover. It can also leave patient or organizational information visible after you have finished. A short end of shift routine helps you close sensitive screens, check what is still on the device and leave work through the right handover process.

This guide is for clinicians using a personal or work phone in a UK healthcare setting. Your employer’s rules come first. The steps below are a practical prompt, not a substitute for your organization’s BYOD, information governance, records management or clinical handover policies.

Start with your employer’s device policy

Before changing phone settings or using an app for work, check your employer’s policy on bring your own device (BYOD), mobile devices and remote working. “It works on my phone” does not mean it is approved for patient or organizational information. Some employers allow only managed devices or specific apps; others set conditions for personal phones, such as a passcode, encryption, remote wipe capability or limits on local storage.

Check the policy or ask your manager, IT help desk or information governance team if you are unsure about:

• Which devices and operating systems are permitted for work.
• Which apps, messaging services, email accounts and cloud storage are approved.
• Whether personal devices must be enrolled in mobile device management.
• What to do if the phone is lost, stolen, shared, repaired or replaced.
• Whether work information may be downloaded, cached, photographed or saved offline.
• How to report a suspected data breach or a message sent to the wrong person.

The Information Commissioner’s Office (ICO) provides guidance on working securely and working from home securely. Its practical security principles are useful prompts, but your organization’s procedures determine what you should do in your role. In particular, follow the approved route for reporting an incident rather than trying to fix a possible breach quietly yourself.

Use approved systems only for patient and organizational data

At the end of a shift, take a moment to check where work information went. Patient details should remain in approved clinical systems, and organizational information should stay in approved work systems. A personal notes app, private email account, consumer file-sharing service or ordinary text message is not a safe substitute just because it is convenient.

Review your recent activity for anything you may have handled outside the approved route. For example, did you copy information into a personal note to remember it, download an attachment to the phone, or send a screenshot to make handover quicker? If so, follow your local policy to move, remove or report it. Do not assume that deleting a file from one screen removes every copy, backup or recipient’s copy.

When using a work app, sign out or close the session as required by policy. Some systems time out automatically; others may keep a session open. Do not leave a clinical record, staff list, rota or organizational document open where someone else could pick up the phone and see it.

Complete the handover process before signing off

Your phone routine does not replace clinical handover. Complete the required handover process using your organization’s approved method, whether that is a structured verbal handover, an electronic record, an approved messaging workflow or a combination. Include the information needed for continuity of care, and limit it to what the recipient needs for the task.

Before you finish, check that any phone-based communication has been received or acknowledged where required. Confirm that tasks, alerts or messages needing action have been handed to an appropriate person. If a message is ambiguous, urgent or clinically significant, use the escalation route in your local policy rather than relying on an informal notification.

Keep the handover in the right place. A chat thread is not automatically the formal clinical record, and a phone call is not automatically a complete handover. Record information in the approved system when obgynkey your policy or professional responsibilities require it.

Close sensitive screens and check what remains open

“Close sensitive screens” is a useful end-of-shift habit. It means more than pressing the home button: some apps remain open in the background, and a screen may return to a record without asking for credentials. Follow your employer’s instructions for ending sessions and clearing work from a device.

1. Finish the approved workflow. Save or submit required work in the right system. Do not leave a draft containing patient information in an unapproved app.
2. Sign out where required. Use the app’s sign-out function if your policy calls for it. Locking the phone is not always the same as signing out of a work service.
3. Close sensitive screens. Exit patient records, email, messaging and other work apps. Check the app switcher for screens that could reopen sensitive information.
4. Check downloads and photos. Look for work attachments, screenshots or photographs in local storage, the camera roll or the downloads folder. Follow policy if anything was saved unintentionally.
5. Lock the phone. Use the device’s lock button or approved timeout settings before putting it away. Do not leave it unlocked on a desk, trolley or shared workspace.

A folder or hidden album is not security. If information is not approved to be stored on the device, moving it out of sight does not make it appropriate to keep there.

Check lock screen previews and notification privacy

Notifications can reveal names, message content, appointment details or other information even when the phone is locked. A phone that is physically with you can still display a preview to someone nearby, or to a person who picks it up. Check both the general lock screen settings and the settings for work apps.

On some phones, a setting such as “show previews when unlocked” can reduce what appears on the lock screen. The exact wording varies by operating system and app. You may also be able to hide sensitive content, disable previews for a particular app or turn off notifications on the lock screen. Choose settings that meet your employer’s requirements and still allow you to respond to work safely.

Do not assume a setting behaves as expected. Test it on the actual lock screen: lock the phone, send a test notification from an approved account or ask an authorized colleague to trigger one, then check what is visible without unlocking. Confirm whether the sender, subject line or message body appears. Repeat the test after a major operating system update or a change to notification settings.

Also check whether notifications appear on a connected watch, car display, tablet or other paired device. A private lock screen on your phone will not protect information shown on another screen. Follow local policy for paired devices and work notifications.

Separate entertainment from clinical work

Keeping work and personal activity separate reduces mix-ups. Use approved work apps and accounts for work, and personal apps for personal activity. Avoid copying work details into entertainment, social media, shopping, personal calendar or personal cloud apps. Do not use a personal account as a workaround if an approved system is inconvenient or temporarily unavailable.

Where your employer provides a managed work profile or container, use it as instructed. It can help separate work apps and data from personal use, but it does not make every action safe or permitted. Follow the rules for moving information between work and personal areas, and do not share device access in a way that exposes work content.

Be cautious with “share” menus. The easy mistake is to tap the wrong recipient or app when several icons look similar. Before sending anything, pause and check the recipient, account, destination and content. If you make a mistake, use your organization’s incident-reporting route promptly.

Quick end of shift routine

Check What to do Policy Confirm you used an employer-approved device, app and account for work. Handover process Complete required handover and escalation steps in the approved workflow. Sensitive screens Close patient and organizational screens; sign out where required. Local files Check for unintended downloads, screenshots, photos or notes and follow policy. Notifications Check lock screen previews and test what is visible while the phone is locked. Physical security Lock the phone and store it securely. Report loss, exposure or a wrong-recipient send.

If something does not look right

If you discover patient or organizational information on an unapproved service, or think someone has seen it, do not wait until your next shift. Follow your employer’s incident-reporting process and contact the appropriate manager, IT or information governance team. Note the relevant facts, such as what happened and when, but do not copy or forward sensitive content as evidence unless your organization instructs you to do so.

If your phone is lost or stolen, use the organization’s reporting route immediately. Do not rely only on tracking or remote-wipe features, and do not delay reporting while you try to locate the device. If a work app or notification setting is behaving unexpectedly, ask IT or information governance for advice before continuing to use it for sensitive work.

Make the routine easy to repeat

A reliable end of shift routine should be short enough to use on a busy day and specific enough to catch common mistakes. Start with your employer’s BYOD and device policy, use approved systems only for patient and organizational data, complete the formal handover process, close sensitive screens and test notification privacy on the real lock screen.

Keep the checklist somewhere appropriate that does not contain patient information. Review it when your phone changes, your employer updates its rules or an app changes how it handles notifications. The goal is a consistent finish: work information stays in the right place, the next team receives the right handover, and your phone does not reveal more than it should.