Fable
The apothecary's two rules: only dispense the medicine needed, and brewed medicine must not be drunk by someone else
Huichun Hall in the south of the city had two iron rules. First, when asking about illness, ask only what is related to the illness—if the stomach hurts, ask only what was eaten and how long it has hurt, not how many people are in the family or where last year's account book is kept. Second, the brewed medicine jar has the patient's name and the purpose of the prescription pasted on it—soup for treating wind-cold can only be given to Zhang San for wind-cold, and cannot casually be shared as half a bowl for Li Si as a tonic.
The new staff member Xiao Wu thought these two rules were wordy. One day Zhang San came to get cold medicine, and Xiao Wu casually asked whether your old mother's leg was better, whether the rent at the East Street shop had gone up, and how well the pregnancy-soothing prescription your wife brewed last time had worked. Zhang San felt this staff member really cared about people and came to him for medicine every time afterward. The shopkeeper later discovered that the illness inquiry book was filled with information unrelated to colds and crossed out all irrelevant lines in the book.
The bigger trouble came in the second month. Huichun Hall brewed a batch of decoction for treating headaches, planned for thirty migraine patients in the village. A medicine peddler passing through said that with a different name this batch could also be sold as a calming tonic, at triple the price. Xiao Wu was tempted and tore the label off the jar to re-label it. The shopkeeper stopped him on the spot, saying that when this decoction was collected, the patients had been told it was for headaches, and the purpose was written on the first page of the medical record; changing the use required asking the patients again.
Later the county introduced herbal medicine regulation, and two teams came to inspect Huichun Hall's ledgers. The first team checked the medicine cabinet register—whether consultation forms recorded only the necessary symptoms and medication rationale, and whether there was any excess private information. The second team checked the prescription dispensing records—whether the use of each dose of decoction matched the purpose originally registered. Because Huichun Hall was compliant in both, it became the first pharmacy in the county to receive dual-standard certification.
Xiao Wu asked the shopkeeper, aren't the two rules just about protecting privacy? Why split them between two parties for inspection? The shopkeeper said they are not the same. Collecting only the data you need governs what you put in your drawer—don't stuff in things that shouldn't be there. Using it only for the original purpose governs what you take out of the drawer to do—getting the key doesn't mean you can open someone else's lock. Both protect the same thing, but one is entrance access control and the other is exit monitoring.
Later, Huichun Hall received a complaint from a patient in a neighboring town. The patient had also been treated for migraines at a pharmacy in that town, and that shop had sold the sleep records collected during migraine treatment to a bedding merchant. The patient said he had only mentioned migraine treatment at the time, not that he would receive pillow advertisements. Only then did Xiao Wu fully understand the difference between entry and exit—minimization at collection does not exempt you from purpose limitations at use; one is about whether you should collect it, the other is about whether you should use it.
Later, eight words were posted on the medicine cabinet: take in without greed, send out without chaos. The shopkeeper said every piece of information others give you comes with a promise of use; the cost of breaking that promise is not a fine, but that no one will dare walk through this door again.