AI and third-party sharing

Nothing is shared until you connect an assistant

MyWholeFile MD works without any AI assistant connected. Assembling your record in one place, with sources attached, is useful on its own. No AI provider receives any part of your health information unless you take a deliberate action to connect one.

The legal basis for the disclosure

Because we act as your practice’s Business Associate, we cannot simply hand your protected health information to an outside company. When you connect an assistant, we carry out your right of access under 45 CFR 164.524, which entitles you to direct that a copy of your record be transmitted to a person or entity you designate. You are the one making the disclosure; we execute it on your instruction and on your practice’s behalf.

This is why the choice is presented as an explicit, revocable instruction rather than a settings toggle buried in an account page, and why your practice can decide whether the pathway is available to its patients at all.

What you give up at that moment

• HIPAA protection ends for the copy you send. The AI provider is not your practice’s Business Associate and is not bound by our Business Associate Agreement. Your records become governed by that company’s terms of service and privacy policy.
• We cannot control or retrieve what you sent. Once information reaches the provider, deleting your account with us does not delete it from them. You would need to use their controls.
• Retention and training are their decisions. Some providers retain conversations, some use them to improve models unless you opt out, and some offer stronger commitments on paid or business plans. Those settings live with the provider, not with us.
• Their staff access rules apply. Human review of conversations for safety or abuse monitoring is common and is governed by the provider’s policies.

We show a plain-language version of this before each assistant is connected, every time, rather than once during signup.

You choose what an assistant may read

Authorization is granted by category, not all-or-nothing. You may allow an assistant to read your medications and labs while withholding clinical notes, or grant read access to your record while withholding a category you consider sensitive. Categories can be changed or withdrawn at any time.

An assistant only ever receives answers to specific, scoped requests. It never receives the keys to your clinicians’ systems, and it cannot reach any record you have not authorized.

What an assistant can never do

• Write to, amend, or delete anything in your medical record
• Place orders, request refills, or message your clinician as you
• Reach records belonging to anyone other than you
• Read a category you have not approved, or continue reading after you disconnect it

Disconnecting

You can disconnect an assistant at any time from your account. Access stops immediately. Disconnecting stops any further sharing but does not remove information the provider already received; for that, use the provider’s own deletion controls.

Other third parties

Apart from assistants you connect, the only companies that touch your health information are the vendors that operate the service on our behalf. Each is named on our subprocessor page along with the agreements we hold with them. We do not share your health information with advertisers, data brokers, insurers, employers, or researchers, and we do not sell it.

Questions

Write to privacy@mywholefilemd.com. See also our privacy policy and export and deletion.