How to Manage Patient Appointments and Photo Records for Dermatology in 2026

Dermatology is a hybrid practice. One exam room runs a 20-minute medical full-skin exam billed to insurance with two punch biopsies sent to pathology. The next room runs a 45-minute cosmetic consult on neuromodulators, fillers, and a $400 chemical peel package paid out of pocket. The afternoon is blocked for Mohs surgery — multiple stages, frozen-section histology turnaround, and same-day reconstruction. The patient at 4:30 is on isotretinoin and needs an iPLEDGE-compliant pregnancy test logged, prescriber confirmation, and a controlled monthly dispense. The front desk is also ringing through a $180 retail SkinCeuticals refill the patient ordered after the morning peel.

A general EHR handles maybe two of those workflows well. The rest leak — photos sit in a phone camera roll, biopsy follow-up depends on a manual spreadsheet, iPLEDGE compliance is a sticky-note system, retail runs on a separate Shopify-style POS that never writes back to the chart. The fragility shows up at the worst times: a malignant biopsy result that nobody routed for two weeks, an iPLEDGE pregnancy test missed on a refill, a Mohs case where the photo of the original lesion lives on a tech's personal phone.

This guide walks through six steps to manage dermatology appointments and photo records with discipline so the medical, cosmetic, surgical, and retail sides of the practice run on one record.

The goal state has six properties. First, appointment types are tiered by length and resource — a single-lesion check does not get the same 30-minute slot as a full-body exam, and Mohs blocks the room for the half-day it actually takes. Second, photos upload encrypted from the moment of capture and tag automatically to body region, lesion ID, and ICD-10. Third, biopsy specimens leave the office with an order linked to the chart, and pathology results route back into the provider's inbox with patient notification templates branched on benign vs malignant. Fourth, iPLEDGE for isotretinoin is embedded in the visit workflow — the monthly pregnancy test, prescriber confirmation, and dispense window are checklist items the staff cannot skip. Fifth, Mohs scheduling assumes multiple stages and same-day or referred reconstruction without overbooking the room. Sixth, retail is integrated with the treatment plan so a post-procedure SKU recommendation, refill recall, and follow-up visit live on the same record.

None of this is exotic — it is what dermatology has needed for a decade. The reason it rarely works is that practices buy a generic EHR and bolt on a separate photo app, a separate POS, and a separate iPLEDGE tracker. The steps below replace those bolt-ons with one record.

Tiering appointment types is the foundation. A general dermatology schedule that lists everything as 'visit' overbooks Mohs days, underbooks cosmetic consults, and burns provider time on lesion checks that took 8 minutes in a 30-minute slot.

Use five base types. Full skin exam runs 30 minutes for established patients and 45 for new patients — long enough to document head-to-toe with photos. Single-lesion check runs 15 minutes — focused exam, possible biopsy, in and out. Cosmetic consultation runs 45 minutes — history, problem list, treatment plan, pricing, consent. Mohs surgery is a half-day block of 90+ minutes minimum, often 3-to-4 hours, with the room held for stage-by-stage frozen-section histology and possible reconstruction. Follow-up runs 15 minutes — biopsy result review, post-procedure check, retail refill conversation.

Layer secondary types as needed: pediatric dermatology (longer for parent counseling), cosmetic injection (room + injector blocked together), laser treatment (room with device, with patient prep time built in), iPLEDGE-required visit (monthly cadence with reminders).

In Deelo Practice each appointment type carries its own duration default, room requirements, provider role, intake forms, and consent templates. Booking the type pre-assembles the visit. A cosmetic consult auto-attaches the cosmetic intake plus consent for photos for marketing if the patient opts in. A Mohs slot blocks the histology tech and OR turnover time alongside the provider.

Photo charting is where most practices leak PHI. A medical assistant snaps a phone shot of a lesion, texts it to the provider, the provider screenshots it into the chart later, and the original lives on the assistant's camera roll until they upgrade phones. Every step of that is a HIPAA risk and a documentation gap.

The right workflow is capture-encrypt-tag-store in a single motion. The clinic phone or DSLR feeds an in-app camera that uploads encrypted in transit and at rest, never writes to the device's local camera roll, and tags each image at capture: body region (12-region scheme — scalp, face, anterior neck, posterior neck, chest, abdomen, back, upper extremities split L/R, lower extremities split L/R, genitals, palms/soles), lesion ID for tracking across visits, ICD-10 code, and clinical notes. The image attaches to the visit and to the lesion record on the chart.

The comparison view is the differentiator. A patient back in 6 months with a changed mole pulls up side-by-side images from the prior visit and current visit on the same lesion ID, with calibration marks if a ruler or sticker is in frame. That comparison drives the biopsy decision. Without it, the provider is comparing today's image to a memory.

For cosmetic photography, set up standardized angle protocols — frontal, three-quarter, profile, with consistent lighting and patient positioning. Pre/post images at 4-week, 8-week, and 12-week intervals build a credible result archive. Get written photo consent at intake separately for clinical use, marketing use, and case-study use — the consent record attaches to each photo.

Biopsy follow-up is where the worst patient-safety events live. A specimen leaves the office, the lab sends a result, the result lands in a fax queue or a portal nobody checked, and the patient does not get a call. A malignant melanoma diagnosis sitting unread for 14 days is not an exotic story — it is a recurring failure mode in clinics where pathology is a manual workflow.

Structure it as an integrated routing pipeline. At biopsy, generate a pathology order tied to the lesion ID and visit. Send the specimen with the order's barcode. The lab returns the report — preferably via direct integration with the major dermpath labs (Aurora Diagnostics, Inform Diagnostics, Quest, LabCorp, regional labs, in-house if equipped) but at minimum a structured PDF in a monitored inbox. The result attaches to the lesion record automatically.

Now branch. A benign result triggers a templated patient notification — letter, secure message, or SMS based on patient preference — informing the patient the result was benign with any follow-up recommendation (nothing further, repeat exam in 6 months, watch a separate area). A malignant result triggers a different workflow: provider review required before notification, follow-up visit auto-scheduled within the clinically appropriate window (typically within 1-to-2 weeks for most skin cancers, sooner for high-risk melanomas), and a flag on the chart that holds visible until follow-up confirms.

Keep an outstanding-pathology dashboard. Specimens sent without a result back in the expected window (typically 5-to-10 business days for routine, longer for stains or molecular work) auto-escalate to a staff member to call the lab. No specimen disappears unaccounted for.

Isotretinoin (formerly Accutane) is regulated under the iPLEDGE REMS program because of severe teratogenic risk. Every prescriber, pharmacist, wholesaler, and patient must register. For patients of childbearing potential, monthly negative pregnancy tests, two forms of contraception (or documented abstinence), and a 7-day prescription window are mandatory. For all patients, monthly visits, lab review, and program attestation are required before each dispense.

The failure modes are familiar to every dermatology practice that has ever run isotretinoin: a patient who comes in on day 9 and the dispense window has expired, a pregnancy test that did not get logged in time, a patient who switched pharmacies without an iPLEDGE update, a refill request that bypassed the monthly visit. Any of these triggers an iPLEDGE non-compliance event.

Embed iPLEDGE in the visit workflow. The patient's chart carries an iPLEDGE flag once isotretinoin is prescribed. Monthly visits are auto-scheduled at the cadence required, with reminders 14 and 7 days before. The visit checklist enforces: confirm both contraceptive methods (or documented abstinence) for patients of childbearing potential, confirm pregnancy test result entered on iPLEDGE for the month, confirm patient has answered iPLEDGE comprehension questions, confirm the prescriber has entered the monthly attestation. The dispense window is calculated from the qualifying visit and surfaces visibly so the patient and pharmacy both know the window.

For patients of non-childbearing potential the requirements are lighter but still monthly. The same workflow tracks them; only the contraception and pregnancy test steps drop off.

Keep an iPLEDGE compliance log. Any miss — late pregnancy test, expired dispense window, missed visit — gets logged with what was missed and how it was remediated. The log is what an audit pulls.

Mohs micrographic surgery is the most schedule-intensive procedure in dermatology. A single Mohs case can run from 90 minutes to a full day depending on the number of stages required to clear margins. Each stage involves the surgeon excising tissue, the histology tech preparing and reading frozen sections, and the surgeon reviewing slides and deciding whether to take another stage or reconstruct. Then reconstruction itself runs anywhere from a 20-minute primary closure to a multi-hour flap or graft, or it gets referred out to oculoplastics, ENT, or plastic surgery.

The scheduling discipline is to block the day, not the slot. A Mohs day is a half-day or full-day block held for the surgeon, the histology tech, the OR room, and a buffer of patients in tiered start times. A typical Mohs day runs 4-to-8 cases starting at 7:30, 8:30, 9:30, 10:30, with each subsequent case starting only when the prior stage clears. Patients are warned at scheduling that they may wait — frozen-section processing alone is 20-to-40 minutes per stage, and a 3-stage case plus reconstruction can run past 4 hours.

In Deelo Practice the Mohs day is a multi-resource block. The surgeon, histology tech, OR room, and reconstruction options (in-house vs referred) are scheduled against the day. Each case has a primary tumor location, prior biopsy histology, expected complexity, and a flagged note if reconstruction is likely to refer out. Patients receive a pre-op packet with the realistic time expectation.

For histology, the lab record attaches to the case. Each stage's slide images, the surgeon's read, and the next-stage decision are logged on the case timeline. Final clearance and the reconstruction record close the case.

Retail is a meaningful revenue line for most dermatology practices, especially cosmetic-leaning ones. SkinCeuticals, Obagi, Revision, EltaMD, ZO Skin Health, Skinbetter — practices stock 6-to-12 lines and physician-dispensed retail can run anywhere from 8% to 20% of cosmetic revenue. The friction is that retail almost always lives on a separate POS that does not write back to the chart.

The failure modes: a patient who buys a $400 SkinCeuticals regimen at the Mohs follow-up gets no record of it on their chart, so the next visit's provider does not know what they are using. A pre-procedure prep kit — say, a tretinoin-and-cleanser regimen for 4 weeks before a peel — is sold separately from the procedure, so refill prompts depend on a memory rather than a workflow. A sunscreen recall on a melanoma patient happens only if a staff member calls.

Integrate retail into the chart. The POS layer attaches each transaction to the patient record with SKU, batch, dispense provider, and tied procedure if applicable. Treatment plans include retail recommendations as line items — the cosmetic consult that recommends a 12-week brightening regimen attaches the SKU list to the plan, prices it, and stages refill recalls at the right week.

Post-procedure SKUs follow the same pattern. A chemical peel auto-attaches the post-peel kit (gentle cleanser, recovery moisturizer, mineral sunscreen) to the visit. Patient leaves with the kit; the next refill recall fires at week 4 based on the kit size.

For melanoma patients and high-risk skin cancer follow-up, sunscreen is part of the care plan, not retail upsell. Set a recurring 90-day refill recall on broad-spectrum SPF 30+ for these patients with a templated message that frames it as adherence, not sales.

Deelo Practice plus DermAI run the dermatology workflow on one record. Practice handles the appointment tiers, the chart, the photo charting workflow with body-region tagging and lesion comparison view, biopsy ordering and pathology routing with branched notification, the iPLEDGE checklist embedded in monthly visits, the Mohs day block with multi-resource scheduling, and the retail integration tied to treatment plans. DermAI layers AI-assisted lesion review and triage suggestions on the photo workflow.

All PHI runs through the encrypted repository under HIPAA middleware. Photos, biopsy reports, iPLEDGE attestations, Mohs case timelines, and retail transactions all attach to the patient record with audit history.

At $19 per seat per month for Starter (small clinic, 3-to-5 staff) up to $69 per seat per month for Enterprise (multi-provider practice with custom workflows and dedicated support), the cost is sized to the practice. A 5-person clinic — provider, MA, front desk, biller, owner — runs the full back office at $95 a month. A 15-person multi-provider group at Business tier ($39 per seat) runs at $585 a month. That is meaningfully less than the cost of a generic EHR plus a separate photo app plus a separate POS plus an iPLEDGE tracker — which is the stack most practices live on today.