Protected health information includes anything that could identify a client: name, address, diagnosis, photos, or schedule.
Never post about a shift on social media, even without naming the client.
Charting is done in the app only. Paper notes must be shredded at the office.