Sharing Data with Personal Health Apps
Patient Access Application Programming Interface (API)
The Patient Access API lets you use third-party health apps of your choosing to securely access your health information from your plan.
Visit Currently Connected Applications for the current list of third-party apps available to connect to your health plan’s Patient Access API.
Once an app is connected to your health plan’s Patient Access API, follow the app’s instructions to grant access to your health information.
Please note: If the app you want is not currently available, contact the app directly to find out when they plan to connect to your health plan’s API.
Additionally, these apps can also access up-to-date information about in-network doctors, clinics, hospitals, and pharmacies through the Provider Directory API.
What Information Can You Access?
You may be able to access your health data dating back to January 1, 2016, or up to 10 years, whichever covers a shorter period.
This may include:
- Allergies and intolerances
- Assessment and treatment plans
- Care team members
- Claims and encounter information
- Clinical notes
- Conditions and diagnoses
- Explanation of Benefits (EOBs)
- Health status and assessments
- Health insurance information
- Immunizations
- Labs, clinical tests, and diagnostic imaging
- Medications and pharmacy information
- Patient demographic information
- Prior authorization status and decisions (when available), excluding drugs
Your Data Sharing Choices
When sharing your health information with third-party apps, you choose which apps can access your information and can stop sharing data with an app at any time.
Frequently Asked Questions
No. You do not have to use a third-party app to access your health information. You can contact your provider or health plan.
No. Your health plan can’t charge you for access through the Patient Access API, but some third party apps may have fees.
You can choose any app that supports health data sharing and connects to your health plan’s API. Health plans do not endorse or certify apps.
It depends on the third-party app you choose. When you sign up for the app, you give it permission to collect your health information.
The app’s Notice of Privacy Practices should explain what information it collects. This may include:
- Allergies and intolerances
- Assessment and treatment plans
- Care team members
- Claims and encounter information
- Clinical notes
- Conditions and diagnoses
- Explanation of Benefits (EOBs)
- Health status/ Assessments
- Health insurance information
- Immunizations
- Labs, clinical tests and diagnostic imaging
- Medications and pharmacy information
- Patient demographic information
- Prior authorization status and decisions (when available), excluding drugs
The app’s Notice of Privacy Practices should explain what information it collects. Apps may collect non-health data, such as your location. Some apps let you choose whether to share that information. If you have questions that are not answered in the Notice of Privacy Practices, contact the third-party app.
Your health plan uses secure technology and shares data only with your permission. However, once data is shared with an app, the app’s privacy policy applies. Review the app’s privacy practices before sharing your information.
Review the app’s Notice of Privacy Practices to understand whether it shares your data with other third parties for purposes such as advertising or research.
You will need to contact your provider or health plan. Third-party apps only display existing data from healthcare sources.
Yes. You can revoke an app’s access to your data at any time using our Patient Access Consent Management System. This is the best way to ensure data is no longer shared with a third-party app.
Simply deleting the app will not stop the app from continuing to access your health data from MHS.
Most apps are not covered by HIPAA. Instead, they are generally covered by the Federal Trade Commission (FTC) and the protections provided by the FTC Act. The FTC Act protects against deceptive practices, such as sharing personal data without permission when the privacy policy says otherwise.
For more information:
- The FTC website includes information about mobile app privacy and security for consumers, including how to file a complaint.
- The HHS.gov website includes information about HIPAA patient rights and who must follow HIPAA
- The HHS.gov website also includes HIPAA FAQs for individuals and information on how to file a complaint with the Health and Human Services Office for Civil Rights (OCR).
California Residents: Additional privacy protections and safeguards for California residents are available through the following resources.
Review the app’s Notice of Privacy Practices to better understand your rights.
Additionally, most apps are covered by the Federal Trade Commission (FTC) and the protections provided by the FTC Act. The FTC Act protects against deceptive practices, such as sharing personal data without permission when the privacy policy says otherwise.
For more information about privacy and consumer rights, visit:
- The FTC website includes information about mobile app privacy and security for consumers, including how to file a complaint.
- The HHS.gov website includes information about HIPAA patient rights and who must follow HIPAA
- The HHS.gov website also includes HIPAA FAQs for individuals and information on how to file a complaint with the Health and Human Services Office for Civil Rights (OCR).
Review the app’s Notice of Privacy Practices to better understand your rights.
Additionally, most apps are covered by the Federal Trade Commission (FTC) and the protections provided by the FTC Act. The FTC Act protects against deceptive practices, such as sharing personal data without permission when the privacy policy says otherwise.
For more information about privacy and consumer rights, visit:
- The FTC website includes information about mobile app privacy and security for consumers, including how to file a complaint.
- The HHS.gov website includes information about HIPAA patient rights and who must follow HIPAA
- The HHS.gov website also includes HIPAA FAQs for individuals and information on how to file a complaint with the Health and Human Services Office for Civil Rights (OCR).