Where is patient data stored and for how long?