Almost every Indian who has walked into a hospital lately has been asked the same thing at the registration desk: “Aapke paas ABHA hai?” The clerk usually cannot explain what it is, the poster on the wall promises paperless care, and the queue behind you is not interested in your hesitation. So people either hand over their Aadhaar and get enrolled in forty seconds, or they say no and spend the week wondering whether they just made life harder.
This guide is for the person standing at that desk. It is an administrative and privacy explainer, not health advice. Every factual claim below is restricted to what we could read on a government page, and where the official documentation is thin, we say so rather than filling the gap with guesswork.
What an ABHA actually is, and what it is not
ABHA stands for Ayushman Bharat Health Account. It sits inside the Ayushman Bharat Digital Mission (ABDM), the National Health Authority’s programme for making records portable between providers.
The most useful thing to understand is that ABHA is an identifier and a plumbing layer, not a database of you. The Press Information Bureau’s official explainer is unusually blunt about this. Asked whether records are stored on the ABDM system, it answers that ABDM does not store medical records and “only facilitates secure data exchange between the intended stakeholders on ABDM network after the patient’s consent.” Asked whether the government could use ABDM to watch an individual’s health status: “No. The health records are created and stored at the place of their creation by respective healthcare providers.” The government, it adds, will not have access.
That architectural claim matters more than any feature list. Your discharge summary stays on the hospital’s system. What ABDM adds is a way for a second hospital to ask the first one for it, and a way for you to say yes or no.
What is held centrally is the registry layer: the identity registry mapping your ABHA number to you, the Healthcare Professionals Registry (HPR) of verified doctors, and the Health Facility Registry (HFR) of verified clinics and hospitals. Those registries are what let a consent request arrive from a named, verifiable doctor at a named facility rather than from an anonymous endpoint.
The 14-digit number and the @abdm handle are two different objects
This is where most confusion starts, and worth being pedantic about, because the two have different risk profiles.
The ABHA number is, per the government’s Health ID page, “a 14 digit number that will uniquely identify you as a participant in India’s digital healthcare ecosystem.” It is your identity token — what a hospital keys in.
The ABHA address is described on the same page as “a unique identifier (self declared username) that enables you to share and access your health records digitally.” It looks like yourname@abdm. It is a routing handle, closer in spirit to a UPI ID than to an account number. It is what a consent request is addressed to.
Practically: give the 14-digit number at a hospital desk; give the address when an app asks where to send records.
The routes into an ABHA, and what each one costs you in disclosure
The official portal at abha.abdm.gov.in offers more than one way to enrol. We verified the Aadhaar flow in detail on a government page; for the other routes we can confirm they exist but deliberately do not reproduce steps we could not read on an official source.
| Route | What it needs from you | What you end up with | Our verification status |
|---|---|---|---|
| Aadhaar | Aadhaar number plus the mobile number linked to it, for OTP. You then supply a mobile number to link to the account and verify that too. | A fully verified ABHA number, plus an ABHA address you choose yourself. | Steps confirmed on the government Health ID page. |
| Driving licence | Driving licence details, offered as the non-Aadhaar path on the official portal. | An ABHA created without submitting Aadhaar. Treat completion of verification as something to confirm on the portal itself. | Offered on the official portal; step detail not verifiable on a government page at the time of writing. |
| Mobile number | A mobile number and OTP. | The lightest-touch entry point. Check on the portal what identity verification it still asks for. | Offered on the official portal; step detail not verifiable on a government page at the time of writing. |
If that last column looks unhelpful, it is doing its job. Plenty of ABHA articles describe non-Aadhaar flows in confident detail, and those flows have changed more than once. Read the portal, not us, for the screens live on the day you enrol.
The Aadhaar walkthrough
The government’s own Health ID page sets out the Aadhaar sequence as follows:
- Enter your Aadhaar number on the official ABHA portal.
- Verify the OTP sent to the phone number linked to that Aadhaar.
- Provide a mobile number to be linked to the health account. This need not be the Aadhaar-linked one.
- Verify the second OTP sent to that number.
- Choose your ABHA address, in the something@abdm format.
Two practical notes. Choose the linked mobile number carefully: it will receive consent requests and login OTPs for years, so a number you actually keep matters more than the one you happen to be holding at the counter. And pick an address you are willing to say out loud in a waiting room — it is a username, not a secret, but it is not nothing either.
Enrolling through the ABHA mobile app follows the same identity logic and additionally gives you the consent inbox described below. Create an ABHA at a hospital desk and never install anything, and you get the identifier without the controls, which is the worst of both worlds.
How sharing is switched on, and how you switch it off
Nothing moves on the ABDM network without a consent artefact. A provider requests, you approve, the record moves; no approval, no movement. The PIB explainer puts it directly: “Only you can share your own records with other doctors/hospitals using different digital health systems after giving your consent.”
What people do not expect is that approval is not all-or-nothing. On the fear that linking records lets any doctor read a full history, the official answer is that consent “need not be for all the health records linked to ABHA at a time” and is granular, provided “separately for each of the health records as per the wish of the patient.”
That granularity is the whole privacy argument for ABHA, and it is the part that goes unused when someone enrols at a counter and never opens the app. To keep real control:
- Install a PHR app — the official ABHA application is one — and log in at least once, so consent requests have somewhere to land where you will see them.
- Read the request before approving. A consent request names who is asking, why, which record types, and for how long. The duration is the field people skim and later regret.
- Approve the narrow thing. If an orthopaedic clinic needs an X-ray report, it does not need your full linked history.
- Revoke when the episode ends. Consent you granted for a course of treatment does not need to outlive the treatment, and revocation is available from the same app.
- Audit occasionally. The consent list doubles as a log of who asked for what — the only realistic way to notice something odd.
One honest caveat: revoking consent stops future access. It does not un-see what a provider already retrieved and filed into its own records. That is true of paper too, but digital retrieval speed makes the distinction sharper.
ABHA is not the Ayushman card, and other clarifications
ABHA versus PM-JAY. These are separate things that share a brand name. Asked whether getting an ABHA number means enrolment in Ayushman Bharat – Pradhan Mantri Jan Arogya Yojana, the official answer is: “No, ABHA is just an unique number used to link all the health records of a person.” The same document states that an ABHA “does not mean the eligibility of a person for the particular scheme including AB-PMJAY.” PM-JAY is a funded health assurance scheme with its own eligibility criteria and its own card. Creating an ABHA does not enrol you, and it does not entitle you to treatment cover. Anyone telling you otherwise, in either direction, is wrong.
Is it compulsory? No. The government’s Health ID page states it plainly: “You can participate at your own free will and choose to create your ABHA number voluntarily.” That is the official position, and it is the sentence worth remembering at a registration desk.
Can a hospital insist? Voluntary enrolment is the stated national policy, and the same official page confirms you can request deletion or deactivation at any time — which would be incoherent if the account were compulsory. Private facilities are not obliged to be on the network at all; the PIB explainer notes ABHA can be used outside government hospitals, but “it is up to the private players to decide whether they want to use it or not.” If a desk says registration is impossible without an ABHA, ask for the ordinary registration route and ask who set that rule. It is usually local workflow habit, not a legal requirement.
Turning it off: deactivation and permanent deletion
The exit is real and it is official. The government’s Health ID page states that “at any time, you can also request for permanent deletion or temporary deactivation” of your ABHA number.
- Deactivation is the reversible option. It suspends use of the account while leaving it recoverable.
- Deletion is the permanent one. Once done, treat it as final.
Both are initiated from your logged-in ABHA account or the official ABHA app under account settings, and both are authenticated by OTP to the linked mobile number. Before pulling either lever, download the records you have already linked. Remember the architecture: your records were never inside ABDM, so removing the account removes the routing, not the underlying hospital files. Those stay with the hospitals under whatever retention rules apply, and you are back to requesting copies the old way.
Because the exact screens shift with portal releases, we have not reproduced a click-path. Use the settings section of the official app or portal and follow the on-screen flow.
Where the DPDP Act 2023 leaves you
India’s Digital Personal Data Protection Act, 2023 is the statute sitting behind all of this, and reading it changes how you should think about ABHA.
Section 6 requires consent that is “free, specific, informed, unconditional and unambiguous with a clear affirmative action,” limited to the data necessary for the stated purpose, and requires withdrawal to be as easy as giving it. Section 5 requires a notice covering what data is involved, why, and how to complain. Section 11 gives you a right to a summary of your processed data and the identities of parties it was shared with. Section 12 gives correction and erasure rights, subject to retention required by law.
Here is the part people assume wrongly: the DPDP Act does not carve out health data as a special sensitive category with heightened protections. Unlike the GDPR, it applies one standard across personal data. Your practical protection therefore rests on ABDM’s consent design plus generic DPDP rights, not on a special statutory tier for medical information — a fair reason to be deliberate about what you link, and not a reason to panic.
The trade-off, stated plainly
The benefits are unglamorous and real: one identity across providers, less repetitive registration, a route to pulling old reports when you switch cities or hospitals, and a consent log more auditable than a folder of photocopies.
The costs are equally real. You are creating a persistent, nationally unique identifier attached to your health interactions. Granular consent only protects you if you use it, and counter-side enrolment hands most people the identifier without the habit. Aadhaar-based enrolment ties the account to your strongest identity document. And the legal floor beneath health data is the ordinary DPDP floor, not a raised one.
Our read: for someone who moves between hospitals, manages a long-running condition, or lives away from the family’s usual doctors, the portability is worth it — provided they enrol through the app and actually check the consent inbox. For someone with one local doctor, a paper file that works, and little appetite for another government identifier, declining is a legitimate choice, and the official position says it is yours to make.
Questions readers keep sending us
Does an ABHA cost anything?
Enrolment through official ABDM channels is free. If a third-party site or agent asks a fee to “process” your ABHA, use the official portal instead.
Can I have an ABHA number without giving Aadhaar?
The official portal offers a non-Aadhaar route based on a driving licence alongside the Aadhaar route. Confirm the current requirements on the portal, as this is the area that has changed most.
If I create an ABHA, can the government see my medical history?
The official position is no. The PIB explainer states records are created and stored by the providers who make them and that the government will not have access. It adds that protocols for anonymised, aggregated use are still to be defined after stakeholder consultation, and that until then health records will not be used by the government.
I already have an Ayushman card. Do I still need an ABHA?
Different instruments. The Ayushman card relates to PM-JAY scheme benefits; ABHA is a records identifier. Holding one says nothing about the other, and neither requires the other.
What happens to my linked records if I delete my ABHA?
They were held by the hospitals and labs that created them, not by ABDM, so deletion removes your account and the linking, not the underlying files. Download what you want to keep first.
How we checked this
Every rule above is drawn from the Government of India Health ID page on ors.gov.in, the Press Information Bureau explainer on Ayushman Bharat Health Accounts, and the text of the Digital Personal Data Protection Act, 2023. Enrolment and deletion happen at abha.abdm.gov.in or in the official ABHA app. Where we could not confirm a step on a government source, we said so. More on who we are and how we verify what we publish.