How to Journal About Patients Without Naming Them

2026-10-19 · Yesterself

There is a specific kind of evening that sends clinicians to a notebook. Something happened on shift that will not sit still. A family member said a sentence you keep replaying. A decision was made quickly and you are not sure it was right. You want to write it down, and then you stop, because the thing you want to write about is a person who did not consent to being written about.

That hesitation is correct. It is also solvable. The skill is de-identification: writing the entry in a way that keeps what is yours and removes what is theirs.

Start by naming what you are actually writing about

Most clinical journal entries that get people in trouble are written as if they were case reports. Presenting complaint, course of treatment, outcome, then a line of feeling at the end. That structure invites detail, and detail is the risk.

Turn it around. The subject of the entry is you. The patient is context, and context can be thin. Before you write a word, finish this sentence in your head: the reason I still feel this is... Whatever follows is the article. The clinical particulars are scaffolding you can mostly take away.

A test that works: if you removed every fact about the patient and the entry became empty, you were writing a record. If it became sharper, you were writing about yourself and the details were in the way.

What to strip

De-identification is not just deleting a name. In a small hospital, a small town, or a specialty ward, the ordinary facts do the identifying.

Remove or blur:

• Names of the patient, family members, colleagues, and your own unit or employer.
• Dates. "Tuesday" is safer than a date, and "recently" is safer still. Your journal already timestamps itself, which is enough to find the entry later.
• Place. Ward, floor, room number, hospital, city.
• Age and identifiers narrowed to a range at most, and only when the age is the point.
• Rare anything. An unusual diagnosis, an unusual injury mechanism, an unusual occupation, an unusual family situation. Rarity is the strongest identifier there is, and it survives the removal of every name.
• Combinations. Three unremarkable facts together can be as identifying as one remarkable one. Count them, and drop one.

Two habits help. First, write in the singular indefinite: a patient, someone, a man in his sixties only if the decade matters. Second, resist the pull toward vividness. The detail you most want to include — the phrase they used, the object on the bedside table — is usually the detail that makes them recognizable. Keep the feeling it produced in you; let the object go.

If your professional body publishes guidance on reflective writing, read it once, properly. Rules differ by country and by license, and what your employer permits is a separate question from what your regulator permits.

How to keep the entry meaningful once details are gone

The fear is that a de-identified entry turns into mush. Hard shift. Sad case. Tired. That is not de-identification failing; that is abstraction replacing specificity in the wrong place.

Move the specificity into your own experience, where it is safe to be exact.

• Instead of the diagnosis, write the moment your certainty changed.
• Instead of the family's words, write what you wanted to say and did not.
• Instead of the sequence of interventions, write which one you would do differently and what stopped you at the time.
• Instead of how the patient looked, write where you felt it in your body and how long it lasted.

This is more concrete than a case summary, not less. "I stood outside the door for four seconds arranging my face" is a real sentence with no protected information in it at all. So is "I have started dreading Wednesdays, and it began about three weeks ago."

Composites are also legitimate. Writing about a pattern — the third time this month I have watched a handover go wrong the same way — gives you something more useful than any single case, and no individual is retrievable from it.

A short template

1. One line on what the shift asked of you.
2. The moment, described from inside your own head.
3. What you believed at the time, and what you believe now.
4. One thing to carry, one thing to put down.

Four lines is a complete entry. It does not need to be long to be worth having in six months.

Storage is part of confidentiality

Where the writing lives determines what you should be willing to write at all. This is the part people skip.

Things worth checking before you write anything sensitive:

• Is the device locked with a real passcode, and does the journal itself require unlocking?
• Is it encrypted at rest, and is that encryption tied to your credentials or the vendor's?
• What syncs, and where? A note in a shared family cloud account is a note that other people can open.
• What happens on backup? Some backups quietly copy an app's contents into a general-purpose archive that is not protected the same way.
• Can support staff at the company read your content? Reading a journal app's privacy policy tells you more in ten minutes than any marketing page.
• Could the writing be requested in a proceeding? This is a real question with a jurisdiction-specific answer, and it is a matter for a lawyer, not for a blog post. Nothing here is legal advice.

The honest rule: write to the level of protection you actually have. If your journal lives in an account a colleague could open, write thinner. If it is properly locked and encrypted, you can write closer to the truth of your own reaction — which is still not a reason to include the patient's identifying details, because de-identification protects them regardless of who can read it.

Yesterself is built for the writing that has to stay private. It is end-to-end encrypted, with no account, no email and no password — your identity is twelve words you hold, and the server stores ciphertext it cannot read. Nothing in it is used to train anything. It is not released yet; the waiting list on the site is the only way in for now. If you want the mechanics rather than the promise, zero-knowledge encryption explained covers what the phrase does and does not mean.

When to write, and when not to

Not every shift wants an entry, and a night when you cannot face the notebook is not a failure. Missing days is normal. The value of this kind of writing shows up in the reread, not the streak — going back three months later and finding that the thing you thought was one bad case was actually a slow change in how you worked.

And there is a boundary worth naming plainly. Writing sorts thinking; it does not treat anything. If what you are carrying from work is not shifting, or is following you home, that belongs with a supervisor, an employee assistance program, a peer support scheme or a licensed professional. This article is not medical or clinical advice, and a journal is not a substitute for care.

If you want a narrower starting point for the days after a hard shift, journaling after a bad nursing shift works through one evening in more detail.

What you are protecting, in the end, is two things at once: a person who trusted you with information, and your own ability to keep doing the work. De-identification is how you keep both.

Common questions

Can I write about a patient in a personal journal at all?

Many clinicians do, and the safer form is an entry about your own reaction rather than a record of the patient. Strip names, dates, locations and unusual details, and check your employer's policy and your professional body's guidance before you decide what belongs in a private notebook.

What details actually identify someone?

More than names. Dates of admission, ward or unit, job title, rare diagnoses, relatives' names, distinctive tattoos or injuries, and even the combination of ordinary facts can point to one person in a small community.

Does a journal entry count as a medical record?

Your private reflective writing is not the clinical record, and it should never be treated as a substitute for it. But it can still contain protected information, so it deserves the same care about storage and access.

Where should this kind of writing live?

On a device you control, locked, with encryption at rest, and ideally in an app whose sync you understand. Avoid shared computers, shared cloud folders and anything backed up into a family account.

Is writing about work the same as processing it?

Not automatically. Writing helps some people sort out what happened and settles nothing for others. If the weight of the work is not lifting, that is a matter for a supervisor, an employee assistance program, or a licensed professional, not a notebook.