What to Do When a Smartphone Is Stolen at a Systemic Sclerosis Specialty Center

A stolen smartphone can put your personal accounts, clinic communications, and possibly protected health information at risk. Act promptly, but do not try to confront or track down a suspected thief yourself. If you were at an appointment, infusion visit, or other care encounter, use another phone or ask staff for help while you secure your accounts.

Secure the Smartphone Remotely

From a trusted device, use the phone maker’s official device-finding service to locate the smartphone if possible. Mark it as lost or remotely lock it, and display a safe way for someone to contact you if the service allows. Do not go to a location shown on a map or confront anyone you suspect has the phone.

If recovery seems unlikely or the device contains sensitive information, consider a remote device wipe. Check what the wipe will erase and whether it may affect your ability to locate the phone; follow the service’s instructions. If the phone is managed by the center through mobile device management, contact its IT team before taking steps that could interfere with their controls.

From a separate, trusted device, change the password for the account linked to the smartphone. Review account activity, sign out of active sessions where possible, and secure your email and other important accounts. If you use the stolen phone for multifactor authentication, update your sign-in methods so you are not locked out.

Notify the Specialty Center’s IT or Security Team

Tell the center’s IT, security, or privacy team as soon as possible, especially if the smartphone is center-owned, enrolled in mobile device management, or used for work. Share when and where it went missing, the device type, and whether it was locked or encrypted to the best of your knowledge.

Explain whether you used it to access clinic email, patient portals, scheduling tools, photos, messages, or other work systems. Do not assume that a device contained no protected health information just because you did not save patient files directly on it; apps and accounts may store or display information in different ways.

Ask the team what steps to take next, including whether they can disable work access, revoke sessions, or remotely wipe the device. Let the center assess whether any information or systems may have been affected. If the phone is needed for care-related messages or appointment details, ask how to stay in contact and confirm upcoming visits through another channel.

Report the Theft to Law Enforcement

If you believe the smartphone was stolen, report it to local law enforcement. Provide the phone’s make, model, color, and identifying details such as its serial number or IMEI if you have them. A purchase receipt, device account, or carrier account may have this information.

Request a report or case number and give it to your carrier or insurer if needed. If the phone may have been misplaced rather than stolen, check with the center’s lost-and-found or security desk as well. Avoid sharing sensitive account credentials or patient information in a public report or with anyone claiming they can recover the phone.

Protect Patient and Personal Information

Consider what the phone could access: saved passwords, email, text messages, photos, health apps, insurance accounts, payment services, and clinic communications. Change passwords for accounts that may be exposed, starting with your primary email and any account used to reset other passwords. Use a trusted device and unique passwords.

If the phone contained or accessed protected health information, tell the center’s privacy or security team promptly. The HIPAA Security Rule concerns safeguards for electronic protected health information, but you do not need to decide whether a reportable breach occurred. The center should assess the circumstances and guide any required response.

Watch for unexpected password-reset messages, insurance or medical account activity, unfamiliar charges, and attempts to use your identity. Contact your health plan or financial institution through a known, official channel if you see suspicious activity. Identity theft monitoring may help you keep track of warning signs; do not share verification codes with callers or messages you did not initiate.

Contact the Mobile Carrier

Call your mobile carrier using its official app, website, or phone number. Ask about SIM card suspension, blocking the device from the network, and transferring your number to a replacement phone. If you use an eSIM, ask the carrier how to deactivate it and set up a replacement securely.

Suspending the SIM can help prevent someone from using your number for calls or texts, including verification codes. After the number is transferred, review account security settings and confirm that text messages and calls reach your replacement device. Ask the carrier to add or verify account protections, such as a PIN, to reduce the risk of unauthorized changes.

Respond Safely If the Phone Is Recovered

If someone finds the phone, arrange its return through the center’s security desk or local law enforcement when appropriate. Do not meet a stranger alone or share your home address. If the phone is returned by the center, confirm that you have the correct device before using it.

Tell the center’s IT or security team before reconnecting a work-managed phone or opening clinic accounts on it. If the phone was out of your control, let the team check its management status and advise whether it should be wiped or set up again. If you suspect anyone accessed your accounts, keep passwords changed, revoke old sessions, and check for unfamiliar activity.

In short, lock down the phone and your accounts, notify the specialty center if clinic access or information may be involved, report suspected theft, and coordinate with your carrier. If the phone turns up, have it checked before using it for clinic or personal accounts again.

FAQs.

What should I do first if my smartphone is stolen at a systemic sclerosis specialty center?

Use another trusted device to mark the smartphone as lost or lock it through the phone maker’s official service. Then notify the center’s IT or security team if the phone was center-owned, managed, or used to access clinic systems. Contact the carrier to discuss suspending the SIM and report suspected theft to law enforcement.

Should I notify the center if the phone contains patient or clinic information?

Yes. Notify the center’s IT, privacy, or security team promptly if the phone contained or could access patient or clinic information. Share what you know, and let the center assess the potential exposure and determine the appropriate response.

How can I protect health and insurance accounts after a smartphone theft?

From a trusted device, change passwords for your email, health, insurance, and other exposed accounts. Sign out of sessions where possible, update multifactor authentication methods, and watch for unfamiliar logins, messages, claims, or charges. Contact your health plan through an official channel if you notice suspicious activity.

What should I do if the stolen smartphone is recovered?

Arrange a safe return and notify the center’s IT or security team before using the phone to access clinic systems. If it was out of your control, follow their advice about checking, wiping, or restoring it. Keep changed passwords and review your accounts for suspicious activity.