Privacy & Trust

Ghost Identity: How We Protect Reviewer Anonymity

Healthcare professionals need to speak honestly without fear of retaliation. Our Ghost Identity system uses cryptographic hashing to ensure no reviewer can ever be identified — not even by us.

Physician Signal Team

February 15, 2026

2 min read

Ghost Identity: How We Protect Reviewer Anonymity

In healthcare, speaking up about a colleague's performance can have real consequences. OR nurses who flag a surgeon's poor technique risk being reassigned. Surgical techs who report unprofessional behavior might face retaliation. That's why Physician Signal built Ghost Identity from the ground up — not as an afterthought, but as a core architectural principle.

The Problem with "Anonymous" Reviews

Many platforms claim to offer anonymous reviews, but their implementations often fall short. If a platform stores your email address alongside your review, a data breach or legal subpoena could expose your identity. If reviews include timestamps and department information, it's often trivial for a surgeon to narrow down who wrote a critical review.

How Ghost Identity Works

When you submit a review on Physician Signal, your identity goes through a one-way cryptographic hash. This creates a unique Ghost Hash — a string of characters that proves you're a real, verified user without revealing who you are.

Here's what makes it different:

Per-doctor hashing: Your Ghost Hash is different for every doctor you review, so even if someone discovered one hash, they couldn't link your reviews across different physicians

One-way function: The hash cannot be reversed. There is no mathematical way to derive your identity from the hash

No plain-text storage: Your identifying information is never stored alongside your review content

Duplicate prevention: The hash system still prevents duplicate reviews — you can only review each doctor once — without knowing who you are

What We Don't Store

We do not store any connection between your review content and your personal identity. Our database architecture physically separates authentication data from review data, connected only by irreversible hashes.

Why This Matters

Honest feedback improves patient care. When healthcare professionals feel safe speaking candidly about surgical skill, professionalism, and clinical outcomes, the entire system benefits. Patients get better information. Good surgeons get recognized. And surgeons who need improvement get honest signal.

Ghost Identity makes that honesty possible. Submit a review with full confidence in your anonymity, browse existing peer reviews to see it in action, or search for any physician to view their Insight Score.

Share this article

Stay in the Signal

Get the latest clinical insights delivered to your inbox.

No spam. Unsubscribe anytime.

Ready to see what the OR team thinks?

Search any surgeon's Insight Score — rated by the professionals who work alongside them.