The Aprima Patient Portal server has an Authentication Certificate to verify credentials. SSL in the protocol prevents eavesdropping by any intermediate actors. The application also sends a tag for disabling local cache of the pages, which prevents the browser.