Who can actually see the medical info? What privilege level is required to do so? I’m curious due to privacy considerations.