Export and deletion

Export a copy

From your account, open Settings → Your data → Export and request an export. We assemble it and email you a secure download link. Exports are available in two forms, and you can take both:

• A readable document organized by category and by date, with the source organization, clinician, and date attached to every item. This is the version to bring to an appointment or hand to a new clinician.
• A structured machine-readable file in the same standard format your clinicians’ systems use, so another application can import it without loss.

There is no charge and no limit on how often you may export. If you prefer not to use the application, email privacy@mywholefilemd.com from your account address and we will handle it.

Disconnect a practice or an assistant

Under Settings → Connections you can disconnect any clinician’s practice or any AI assistant. Access stops immediately. Disconnecting a practice stops future retrieval; you choose separately whether to also delete the records already retrieved from it.

Delete your health data

Under Settings → Your data → Delete you can delete the health records we hold while keeping your account open. We remove them from active systems immediately and confirm by email.

Delete your account

Under Settings → Account → Delete account. This revokes every connection, deletes your health records and your account information, and cannot be undone. Export first if you want a copy. We confirm by email when it is complete.

You can also request deletion by emailing privacy@mywholefilemd.com from your account address. We will verify the request before acting on it, because acting on an unverified deletion request would itself be a security failure.

What deletion actually removes, and what it does not

• Active systems: removed immediately.
• Encrypted backups: removed within 90 days as backups age out on their normal schedule. They are not accessible in the meantime.
• Audit logs: retained for six years, as HIPAA requires. These record who accessed health information and when. They are not deleted on request, because their purpose is to preserve a record of access that already occurred. They do not contain your clinical content.
• Your original medical record: unaffected. We hold a copy; your clinicians keep the original, and deleting our copy does not and cannot delete theirs.
• Anything you sent to an AI assistant: not affected. Use that provider’s own deletion controls. See our AI sharing disclosure.

Correcting something that is wrong

We cannot amend your medical record. Because we hold a copy, changing our copy would put it out of step with the original and destroy the provenance that makes the record trustworthy. Request the correction from the practice that created the entry; you have a right to request an amendment from them. Once they make it, the corrected version appears here on the next sync.

If you are a patient of a participating practice

Because MyWholeFile MD operates as your practice’s Business Associate, a few requests are properly directed to the practice rather than to us. If yours is one of them, we will tell you which practice to contact and help you make the request rather than leaving you to work it out.