The phone call was the bottleneck and the blind spot at the same time. Practitioners lost significant time to hold music and call-backs on queries that were rarely complicated. When the call finally connected, the outcome survived only in two people's memories and whatever each of them recorded separately afterwards.

Nothing travelled across organisational boundaries. Hospitals, GP practices, community pharmacies and care homes each run their own systems, with their own access rules and their own version of the record. A query that crossed between them had no shared place to live, which is precisely why it fell back to the telephone.

The fast alternatives weren't the safe ones. Consumer messaging apps are quick, which is exactly why they get reached for, and they are not built to carry patient-identifiable information. No role-based access, no organisational control, no audit trail, no way for a governance lead to answer a question about what was shared and with whom.

Security had to be demonstrable rather than asserted. A platform carrying patient information between NHS organisations needs independent evidence that it holds up, not a paragraph in a brochure.

Auditability isn't a feature in this setting, it's the substance. Who asked, who answered, when they answered, when the matter was closed. In regulated clinical practice that trail is part of how care is evidenced, and a phone call produces none of it.

The patient has to be unambiguous. A thread about "the dosage for Mrs Doherty" is a clinical risk in itself unless the conversation is bound to a specific, validated patient identity.