Skip to main content
The Account endpoints take a Hi Doctor patient from a new registration to a signed-in session. They keep the session alive with token refresh, recover a forgotten password, maintain the profile that checkout needs, look up the outcome of a keyed write, and close the account. Start with Sign up for new patients. Last reviewed: 2026-11-04

​
Prerequisites

  • Send X-Brand-Slug: hi-doctor on every request.
  • Registration, verification, sign-in, refresh, Google sign-in and password recovery need no bearer token. Profile, deletion and the idempotency lookup need one.

​
Operations

​
Boundaries and side effects

  • Registration, forgot-password and verification codes have cooldowns. A 429 carries Retry-After and the same seconds as wait_seconds in the body.
  • Refresh tokens are not rotated. Access lasts 1 day, refresh 30 days.
  • Checkout refuses with PROFILE_INCOMPLETE and missing_fields until the profile is complete.
Account deletion is irreversible. It returns 204, cancels any live subscription immediately (not at period end), and stops credentials and tokens from working. An account without records is deleted; one with medical records is anonymized instead, because those records are retained. Deletion is throttled to 5 attempts per hour. A 502 means the subscription could not be confirmed cancelled and nothing was deleted.