NZ Herald
  • Home
  • Latest news
  • Herald NOW
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
  • Herald NOW
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Politics
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Herald NOW
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In
Advertisement
Advertise with NZME.
Home / Business

Doctors sharing sensitive files via social media messaging inspires new app Celo

Chris Keall
By Chris Keall
Technology Editor/Senior Business Writer·NZ Herald·
19 Jun, 2021 10:22 PM9 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

A British Medical Journal study found a third of medical staff in the UK used WhatsApp to share patient data. In March 2020, the NHS banned patient files being shared over the Facebook-owned app. Photo / Getty Images

A British Medical Journal study found a third of medical staff in the UK used WhatsApp to share patient data. In March 2020, the NHS banned patient files being shared over the Facebook-owned app. Photo / Getty Images

Steve Vlok says a lot of our medical staff are sharing sensitive patient files over insecure social media messaging apps - including one case where a photo associated with a paediatric case was sent to a random member of the public.

"If you're a parent, that's your worst nightmare," Vlok says.

Yet the use of social media messaging, and associated gaffes, is commonplace in our hospitals, he says.

He should know. Vlok was an engineering student at Canterbury University in 2013 when his girlfriend - a registrar (or junior doctor) told him that the use of social media messaging tools like Facebook-owned Whatsapp was widespread.

Read More

  • ACC's new working-from-home policy a potential pain in the neck - for its own staff
Advertisement
Advertise with NZME.

Hospital staff wanted an easy way to group message and share files, and Whatsapp was on everyone's phones as work/life boundaries blurred.

Over the next two years, as he worked days as an engineering manager at drinks firm Frucor, Vlok set about developing a secure messaging and collaboration app that would comply with global health sector security and privacy standards, could be easily set up on a smartphone, and which easily integrate with patient record systems.

Celo's makers say, unlike Whatsapp, you can't add outsiders to a group, or send a sensitive file to a stranger by mistake because you've mistyped a number. Photo / Supplied
Celo's makers say, unlike Whatsapp, you can't add outsiders to a group, or send a sensitive file to a stranger by mistake because you've mistyped a number. Photo / Supplied

The result was a platform called Celo (pronounced "see-low"), which was promising enough to get backing from Sir Stephen Tindall's K1W1 fund and Crown venture capital agency NZ Growth Capital Partners and under-the-radar rich lister John Clough (a Hamiltonian who made his fortune selling software in Hong Kong after getting stranded in the city-state).

Vlok went full-time with Celo (also the name of his startup) in 2016.

Advertisement
Advertise with NZME.

Fast-forward to 2021 and, commercially, things are looking good for Celo.

Vlok now employs 20 staff, and numbers our two largest District Health Boards, Auckland and Canterbury, among his customers. The Hawke's Bay, West Coast, Counties-Manukau DHBs are also onboard, along with private operators MercyAscot and Unichem. And Celo has started to land its first offshore clients in Australia, the UK, Ireland, Switzerland, South Africa. He plans a funding round shortly to bankroll a push into the US.

Discover more

Business

Budget 2021: The technology industry's verdict

20 May 05:50 AM
Business

Prisons, partners tapped as Datacom stretches to hire another 250

18 Jun 05:23 AM
Companies

Out of Workers: The tech sector's new pain-point

13 Jun 05:00 PM
Business

$35m Covid vaccine software overspend? Critic says memo proves it

24 May 05:24 AM

The privately-held company doesn't share financials, but Vlok says over the past year his business has doubled as the pandemic has encouraged more digitisation of health systems in many countries.

Read More

  • Peter Beck, Peter Thiel back young New Zealander's startup, HeartLab
  • Hip to AI: orthopaedic surgery software startup Formus Labs raising $7 million

But his key frustrations remain - from his contacts throughout the health system - and his wife, now a plastic surgeon working under the Waikato DHB - the Celo founder knows that use of Whatsapp and other social media messaging software is still widespread among medical staff, along with bloopers.

"It's very common for a registrar to join a hospital and the first question from a colleague is, 'What's your cell? I'll add you to our WhatsApp group.' It's very informal."

What's wrong with using WhatsApp? After all, Facebook makes a big deal about its group messaging app being end-to-end encrypted.

Celo's app (pictured) has been adopted by our two largest DHBs - Auckland and Canterbury - but shunned by others. Image / Supplied
Celo's app (pictured) has been adopted by our two largest DHBs - Auckland and Canterbury - but shunned by others. Image / Supplied

"That only cuts out middle-man attacks," Vlok explains. WhatsApp's encryption means if a cyber-thief does manage to intercept a message would look scrambled and unintelligible.
But the recipient can read it fine and forward it to anyone, who can also read it. And this is the problematic bit. It's easy to add anyone to a WhatsApp group, leading to ungoverned sprawl and, worse, you only need to enter someone's cellphone number to add them to a WhatsApp chat or forward them a message or file. Fat fingers mean sometimes the wrong number is entered, and sensitive files end up in random hands.

Engineer Steve Vlok founded Celo in 2014 after his partner - then a junior doctor and now a plastic surgeon - told him about widespread use of social media for sharing sensitive files. Photo / Supplied
Engineer Steve Vlok founded Celo in 2014 after his partner - then a junior doctor and now a plastic surgeon - told him about widespread use of social media for sharing sensitive files. Photo / Supplied

There's also the issue that images sent over WhatsApp are often saved to a phone's camera roll - from where they can be shared almost anywhere, via any app. More, WhatsApp is not PIN-protected, and work and personal contacts can be easily jumbled.

Advertisement
Advertise with NZME.

The problem is by no means restricted to NZ. A National Health Service study found WhatsApp use widespread in the UK health system. That followed a British Medical Journal investigation that WhatsApp was commonly used for sharing everything from second-opinions to radiology results. Overall, a third of medical staff used a social messaging app for work. The NHS banned the sending of patient information over the Facebook app in March 2020.

Vlok says staff working 65 hours  a week are prone to grab any tool, like WhatsApp, that will make their lives even slightly easier. They need clearer guidance and better tools. Image / 123rf
Vlok says staff working 65 hours a week are prone to grab any tool, like WhatsApp, that will make their lives even slightly easier. They need clearer guidance and better tools. Image / 123rf

A message or file sent by Celo, by contrast, can only be shared with other, authenticated users on your organisation's Celo system, or a Celo system used by an approved partner (like a GP, pharmacist, social worker or therapist) - or with an integrated system such as a hospital's patient record database. A message or image could still be screen-grabbed by someone determined to beat the system - but even that would trigger a warning to an administrator.

Vlok's other frustration is that he has to "constantly reinvent the wheel" by pitching his product DHB by DHB across our 20 local health agencies.

An effort to sell it collectively to South Island DHB's was knocked back, despite Vlok offering a steep discount in an effort to get the locals onboard (Celo usually costs between $1 and $5 per user per month, depending on features; there's also a free basic version).

Read More

  • Why are our defences so shaky? The Waikato DHB ransomware attack in 20 questions
  • Chris Keall: Two problems with the report on the Reserve Bank data breach

Vlok also pitches his app as quick and easy to get up and running. Celo is simple to download to your smartphone, and it's compliant with the data standards commonly used by hospital software systems - so it can be easily plugged into patient record management systems. He says a recent 500-person implementation in Wales was done in 24 hours. Today, "81 per cent of staff use it daily and 95 per cent weekly because it's so simple", he says.

The Celo founder says for security, efficiency, privacy and ease-of-use, there should be a co-ordinated approach across our health system, with a single communications platform chosen - be it his company's or another's.

With his partner working for the ransomware-devastated Waikato DHB, he's particularly wary of how hospital systems have to be tightly buttoned down. Sharing via social media, and a patchwork of policy between our different DHBs, goes in the other direction, he says - opening gaps for social engineering by hackers as they constantly probe for vulnerabilities.

Health boss responds

In April, the Government said it would scrap the system of 20 regional DHBs in favour of a single national health agency, plus a new Māori Health Authority. The change will come in effect from July next year.

And May saw the Budget 2021 provision of $230 million operating spending and $170m capital spending earmarked for a new, centralised patient record system, to be developed over the next four years. That will provide an opportunity, if the Ministry of Health wants to take it, to integrate a single, secure messaging platform.

But what's the ministry's reaction in the meantime to staff using social media apps for work, and decisions about secure messaging varying between DHBs?

"Instead of mandating specific technology solutions that everyone must use, the Ministry expects to see health organisations make informed choices about the services they use, deputy director-general of Health Shayne Hunter says. Photo / Supplied
"Instead of mandating specific technology solutions that everyone must use, the Ministry expects to see health organisations make informed choices about the services they use, deputy director-general of Health Shayne Hunter says. Photo / Supplied

Deputy director-general of health Shayne Hunter said in a written response to Herald questions:

"Individual health organisations across New Zealand will use a wide range of technology from many different suppliers to meet their business needs.

"The Ministry of Health encourages health organisations to ensure the digital services they use are safe, secure, integrated and reliable, and the Ministry provides requirements they are expected to meet. The requirements specify that organisations must govern the data they hold in line with security, data protection and use, privacy, social licence and Māori data sovereignty guidelines.

"The requirements also encourage an open approach where digital services support collaboration, continually evolve and are interoperable with other services – rather than working in isolation, or only working within an organisation.

"Instead of mandating specific technology solutions that everyone must use, the Ministry expects to see health organisations make informed choices about the services they use; this is likely to lead to consolidation of digital services over time without inhibiting innovation."

Hunter sent a link to Ministry guidelines that are heavy on information technology and legal jargon and that, as he had flagged, do not name specific apps.

Conformant or compliant? Say what?

Similarly, in a response to an Official Information Act request, the Hutt Valley DBH said, "Our mobile devices policy does not specifically refer to cloud-based messaging applications such as WhatsApp, Snapchat, and Messenger, but it outlines rules for acceptable use and reminds our clinicians to act in accordance with the principles and the spirit of the Health Information Privacy Code".

That code runs to 21 pages of rules and principles which are not hugely accessible. Similarly, the "A Digital, data and technology services – minimum requirements" guide linked to by Hunter includes a mash of "encouraged" and "required" standards - some of which are subject to "conformance" and some to "compliance". What is the difference, for those without a degree in linguistics? According to the MoH, in this context, "conformance" means "outcomes of a certain standard are being met, even if the standard itself may not be partially or fully followed."

While stressing its encryption, plus extra safeguards for those who sign up to its Business version, Facebook makes no claims that Whatsapp is complaint with HISO (Health Information Standards Organisation) guidelines used by health organisations worldwide, and referenced by our Ministry of Health's security framework.

'Do a better job'

The Herald asked Hunter if the Ministry of Health considers WhatsApp to be HISO-compliant. The deputy director-general did not immediately respond on that point, but given the Ministry's guidelines that new software only has be "conformant" (or partially compliant), and his reluctance to weigh in on individuals apps, critics like Vlok won't be expecting a specific response.

Vlok says it's simply not realistic for hospital staff working double shifts to wade through pages of obscurely-worded guidance.

He's fed up.

"We talk about wellbeing, but we've got staff working 65 hours a week and they need the right tools to do their job," he says.

"People have no time. If they think there's even a small edge to do their job more easily, they'll turn to WhatsApp. The chiefs and chairman of the DHBs need to do a better job."

Save

    Share this article

    Reminder, this is a Premium article and requires a subscription to read.

Latest from Business

Premium
Business

Pilot sacked over Covid-19 vaccine wins Employment Court case

08 Jul 07:09 AM
Premium
Manufacturing

On The Up: Freeze-dried food maker aims for major growth with Rebel Sport, Foodstuffs deals

08 Jul 07:00 AM
Premium
Shares

Market close: NZX not crying over spilt a2 Milk, gains 0.74%

08 Jul 05:51 AM

Audi offers a sporty spin on city driving with the A3 Sportback and S3 Sportback

sponsored
Advertisement
Advertise with NZME.

Latest from Business

Premium
Pilot sacked over Covid-19 vaccine wins Employment Court case

Pilot sacked over Covid-19 vaccine wins Employment Court case

08 Jul 07:09 AM

'Great' pilot was sacked despite doctor's vaccine advice, request for Novavax.

Premium
On The Up: Freeze-dried food maker aims for major growth with Rebel Sport, Foodstuffs deals

On The Up: Freeze-dried food maker aims for major growth with Rebel Sport, Foodstuffs deals

08 Jul 07:00 AM
Premium
Market close: NZX not crying over spilt a2 Milk, gains 0.74%

Market close: NZX not crying over spilt a2 Milk, gains 0.74%

08 Jul 05:51 AM
Reserve Bank of Australia surprises markets, holds cash rate at 3.85%

Reserve Bank of Australia surprises markets, holds cash rate at 3.85%

08 Jul 05:45 AM
Gold demand soars amid global turmoil
sponsored

Gold demand soars amid global turmoil

NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP
search by queryly Advanced Search