Well Life Medicine

Chrome extension · for ModMed and athenahealth users

Session Recorder

A small Chrome extension that records how you use your EMR, so Well Life can study real clinical workflows and make them faster. Well Life installs it, keeps it updated, and removes it at the end of the pilot through Chrome’s built-in management. You do a two-minute setup once, then keep working exactly as you do today.

FreeAbout two minutesOne administrator passwordPause any time

Transparency

What it records, and what it never does

Session Recorder watches only three websites: modmedapp.com, ema.md and athenahealth.com, including all of their subdomains. Everywhere else in Chrome it does nothing at all.

Recorded

  • Screenshots of your EMR tabTaken when you click, change a field, press Enter, Tab or Escape, scroll, or the page updates, and only while that tab is on screen. Identical frames are skipped.
  • Where you clicked and what kind of control it wasFor example “a button labeled Save” or “a text field named Chief Complaint”. The click position and the control’s label, not its contents.
  • The EMR page address and the timeSo the screenshots can be put in order and matched to the part of the EMR you were using.

Never recorded

  • Other websites or tabsEmail, search, banking, personal browsing: the recorder is not loaded on those pages and never captures them.
  • What you typeKeystrokes are not captured. The only keys it notes are Enter, Tab and Escape, and only that they were pressed.
  • Audio, camera or videoThe extension has no microphone, camera or screen-recording permission and contains no code that uses them.
  • Passwords, cookies, clipboard or selected textLogin and password pages are skipped automatically, and any page showing a password field pauses capture.

Screenshots show whatever is on your screen at that moment, including patient information and text already visible in a field. That is exactly why every screenshot is encrypted on your computer before it is saved or sent anywhere, as described below.

Security

How recordings are protected

Recordings are sealed before they leave your browser, and the key that opens them never touches your computer, the upload service, or cloud storage.

  1. Captured on your computer

    The screenshot and its notes are assembled in your browser and nowhere else.

  2. Encrypted immediately

    Each recording is sealed with public-key encryption (libsodium sealed box) in memory. Only the encrypted form is ever written to disk or transmitted.

  3. Sent to Well Life over HTTPS

    The receiving service can only accept and store sealed recordings. It holds no key and has no way to read, list or return them.

  4. Opened only by authorized reviewers

    The private key is kept offline at Well Life. It is the only thing that can decrypt a recording, and it is never installed on any computer that records.

Recordings are stored in Well Life Medicine’s private cloud storage and handled under our HIPAA privacy and security program (see the privacy notice). They are kept for 30 days and then deleted automatically.

Setup

Set up in three steps

You need Google Chrome on a Mac or Windows computer, and the computer’s administrator password for one step. There is no account to create and nothing to configure: once Chrome is connected, Well Life installs, pins and updates the recorder for you, and removes it again at the end of the pilot. The setup files below are for Clear Choice Dermatology and already contain the practice’s enrollment code.

  1. Download the setup package

    A small, signed package from Well Life Medicine. It places the enrollment code where Chrome looks for it and adds a tiny cleanup job that removes it again when the pilot ends. It adds nothing to your Applications folder.

    If Chrome holds the download because the file is new and not yet commonly downloaded, open Chrome’s downloads panel (the arrow at the top right), click the file, and choose Keep.

  2. Open it and click Install

    Open the downloaded file, click Continue and then Install, and enter your Mac password when asked. The installer takes a few seconds.

  3. Quit Chrome and open it again

    Quit Chrome completely with ⌘ Q, not just the window, then open it again. Within a minute or two the Session Recorder icon appears pinned next to the address bar, and Chrome’s menu shows Managed by welllifemedicine.com. That’s it.

Set up without the setup file

If your practice prefers not to run a downloaded program, the same result comes from placing the enrollment code by hand. The cleanup job is not included this way, so removal at the end of the pilot leaves the small code file behind; the quick guide shows how to delete it.

Mac: one Terminal command

Open Terminal (⌘ Space, type Terminal), paste the command, press Return, and enter your Mac password. Then quit and reopen Chrome.

sudo sh -c 'mkdir -p /Library/Google/Chrome && printf %s 91e2d46a-ee19-40cb-b0d6-fcf5bedd4cc7 > /Library/Google/Chrome/CloudManagementEnrollmentToken && chmod 644 /Library/Google/Chrome/CloudManagementEnrollmentToken' && echo 'Done. Now quit Chrome completely (Cmd-Q) and open it again.'

Windows: a registry file

Download the file, open it, and answer Yes to both prompts. Then close and reopen Chrome.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"CloudManagementEnrollmentToken"="91e2d46a-ee19-40cb-b0d6-fcf5bedd4cc7"
Download registry file

What “Managed by welllifemedicine.com” means. Chrome on this computer, in every Chrome profile, accepts browser settings from Well Life for the length of the pilot. The only settings Well Life applies install, pin, update and eventually remove Session Recorder, plus Chrome’s basic reporting: Chrome version, operating system and installed extensions. Management does not let Well Life see your screen, your browsing, or anything beyond the recordings described above.

What the cleanup job does. The setup file adds a job that runs for a moment at startup and every six hours. It is not a running program and it never connects to the internet. It only checks whether Chrome has recorded that Well Life released this computer; when that happens, it deletes the enrollment code, Chrome’s connection record, and itself, leaving nothing behind. Nothing is needed from you, and the “Managed by” notice disappears on its own. To leave sooner, see the quick guide.

For IT administrators

Already managing Chrome?

A browser can be managed by only one organization. If your practice already manages Chrome through Google Admin or Windows and macOS policy, the setup steps above will not take, and you should not use them. Instead, force-install Session Recorder yourself by extension ID with the custom update URL below. Chrome will keep it updated from that feed, and you remove it the same way when the pilot ends.

Extension ID
nmmlgaahjeocehdigommbdnajekmbinm
Update URL
https://session-recorder-upload.welllifemedicine.com/extension/updates.xml
Version
0.1.3
Policy
ExtensionInstallForcelist