Sensitive Field Readout Warning

NHF explicitly identified the need for a warning when sensitive fields are read aloud, recognizing that peer mentors frequently work in community settings where their device may be overheard by others. Audible readout of a contact's health status, home address, or case content without consent is a GDPR data minimization risk and a breach of user trust. Implementing this as a configurable, reusable widget means it can be applied consistently across all sensitive fields with minimal per-screen overhead and extended to new data types without modifying warning logic. The feature also demonstrates to all partner organizations that the platform treats data privacy in assistive technology contexts as a first-class concern.

Implement as SensitiveFieldWarningWidget in Flutter, wrapping any display widget that contains sensitive personal data. The widget registers a Semantics focus listener; on focus entry it presents a modal BottomSheet or AlertDialog confirmation before TalkBack or VoiceOver reads the field content. ScreenReaderWarningService tracks session-level confirmation state per field identifier to avoid repeated prompts within a single session. Fields are tagged declaratively via an annotation parameter so developers can mark sensitive fields without modifying warning logic. The system is extensible to new sensitive data types and configurable via the OrganizationLabels system for per-org field labeling.