I can see why there is a benefit to the patient of being able to check back in to listen to something again. It might be encrypted, but it appears that encrypt

I can see why there is a benefit to the patient of being able to check back in to listen to something again. It might be encrypted, but it appears that encryption was ineffective (i.e. the API or application has access to the keys), since a user was able to access others' recordings. To me that's the big problem with everyone claiming to be "encrypted" - Dropbox was also encrypted back when they forgot to check user passwords for a few hours and anyone could log in "as you".