One patient account sits at the center — the owner. In most families that account belongs to the person who set things up (often a daughter or son) and is also the patient's own app: the owner can add a second key for the patient, a separate email and password or a number code, so her sign-in feels like hers.
Family members hold their own full accounts, linked to the owner with a role. The caregiver role has full access to the patient's information and pages. The family role gets the Love Bucket, photos and family updates but not the medical pages. The extended role — friends, church, work — gets the Love Bucket and the friends feed only.
Doctors, nurses, therapists and home professionals do not join as family. They join with a code from the family at the IDC Team sign-in and get their own dashboard. A doctor can also be a simple contact card on the Care Team page (a name and a number to tap to call) with no login at all.