Woman outdoors with arms outstretched, looking at the sky, symbolizing freedom, control, and confidence in managing her health with HealthEx.

PRIVACY CENTER

Your medical records belong to you.

HealthEx puts you in control of your health data. We were founded on the principle that your health data is yours, and you should be able to use it: to understand your health, to walk into an appointment prepared, and be the best advocate for your own care.

HealthEx user viewing their longtitudinal health history in HealthEx Wallet

This page was last updated August 31, 2026.

Woman outdoors with arms outstretched, looking at the sky, symbolizing freedom, control, and confidence in managing her health with HealthEx.

PRIVACY CENTER

Your medical records belong to you.

HealthEx puts you in control of your health data. We were founded on the principle that your health data is yours, and you should be able to use it: to understand your health, to walk into an appointment prepared, and be the best advocate for your own care.

HealthEx user viewing their longtitudinal health history in HealthEx Wallet

This page was last updated August 31, 2026.

Woman outdoors with arms outstretched, looking at the sky, symbolizing freedom, control, and confidence in managing her health with HealthEx.

PRIVACY CENTER

Your medical records belong to you.

HealthEx puts you in control of your health data. We were founded on the principle that your health data is yours, and you should be able to use it: to understand your health, to walk into an appointment prepared, and be the best advocate for your own care.

HealthEx user viewing their longtitudinal health history in HealthEx Wallet

This page was last updated August 31, 2026.

Woman outdoors with arms outstretched, looking at the sky, symbolizing freedom, control, and confidence in managing her health with HealthEx.

PRIVACY CENTER

Your medical records belong to you.

HealthEx puts you in control of your health data. We were founded on the principle that your health data is yours, and you should be able to use it: to understand your health, to walk into an appointment prepared, and be the best advocate for your own care.

HealthEx user viewing their longtitudinal health history in HealthEx Wallet

This page was last updated August 31, 2026.

Why is HealthEx involved?

Why is HealthEx involved?

CHALLENGE

Your medical history is scattered across every place you've received care, in systems that typically don't talk to one another. HIPAA gave you the legal right to your medical records in 2001. Exercising that right meant finding each provider, asking each separately, and waiting for paper records.

SOLUTION

HealthEx is an authorized participant in the national networks your hospitals, labs and clinics already use to exchange records, so you can ask once and get everything digitally in one place: your HealthEx Wallet.

HealthEx user viewing their HealthEx Wallet, unifiying their health data and sharing it with consent with trusted parties.

You shouldn't have to choose between getting to your health data easily and keeping it safe. With HealthEx, you can put your health data to work on a platform you can trust.

OUR COMMITMENTS

OUR COMMITMENTS

Health data is sensitive and deeply personal.
That's why HealthEx is designed to protect your privacy.

Health data is sensitive and deeply personal. That's why HealthEx is designed to protect your privacy.

You have full control over which information is placed in the Wallet and where you choose to share it.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

You decide where your data goes

No data is shared without your explicit request. Your permission is checked every single time your record is requested, not just once at sign-up.

No data is shared without your explicit request. Your permission is checked every single time your record is requested, not just once at sign-up.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Your data is not sold to brokers

Your data is not sold to brokers

We do not sell your health data and do not use it for any targeted marketing or advertising activities. We do not use it to train AI models.

We do not sell your health data and do not use it for any targeted marketing or advertising activities. We do not use it to train AI models.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

You can see every connection

You can see every connection

We log every connection and every retrieval, and you can always review them.

We log every connection and every retrieval, and you can always review them.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

You can disconnect anytime

You can disconnect anytime

Disconnect from any app at any time. You can also ask us to delete your data, and it's gone within 24 hours.

Disconnect from any app at any time. You can also ask us to delete your data, and it's gone within 24 hours.

HealthEx does not sell
your data

HealthEx does not sell
your data

The apps you choose to connect pay us to retrieve your records with your permission

We don't sell your records to anyone; not to advertisers, not to data brokers, and not as de-identified copies. We don't train AI models on your health data. The apps you connect to pay us to prove your permission, find your records, and retrieve them.

We encourage you to familiarize yourself with the terms of service of the apps you apps you choose to share data with.

Illustration of an individual using HealthEx to securely store their health data.
Illustration of an individual using HealthEx to securely store their health data.

Your records stay only as long
as your permission does

Your records stay only as long as your permission does.

See exactly what we hold, who else can see it, and how long we keep it

WHAT

WHO CAN SEE IT

WHO CAN SEE IT

WHY HEALTHEX HAS IT

WHY HEALTHEX HAS IT

HOW LONG WE KEEP IT

HOW LONG WE KEEP IT

Your protected health information: visits, diagnoses, medications, labs, etc.

  • You.

  • Partners (apps) you explicitly connect.

  • Us, when you reach out for support.

So you don't have to rebuild your history from scratch every time.

While your consent is active (up to one year), then renewed only if you say so. Deleted within 24 hours of your account deletion or consent expiry.

Your identity verification: phone, selfie, government ID

  • Our identity provider.

  • Us.

  • Not partners.

We want to make sure you receive the right records, and so need to verify it's really you.

Handled by CLEAR as part of verification. Never added to your health record.

Your authentication: email address, phone number

  • Us.

  • Your auth provider (such as Google).

We use this as an optional way to sign you in via existing social accounts.

While your consent is active (up to one year), then renewed only if you say so. Deleted within 24 hours of your account deletion or consent expiry. Never added to your health record.

Your consent and access log.

  • You.

  • Partners (apps) you explicitly connect.

  • Us, for audits.

So you can see everywhere your data went.

Kept indefinitely for regulatory compliance. It's the record of what you agreed to and when, so it outlives the data itself.

We keep encrypted backups so we can recover from an outage. A copy of your records can sit in those backups for up to six months before it ages out. They aren't reachable in normal operation and are never used to serve your data.

IN YOUR CONTROL

You can view, share, disconnect and delete, any time.

Choose where it comes from.

Your records are located automatically, but only the places you choose get retrieved. You can skip a provider to exclude that data.

Graphic showing logos of top health providers in the U.S such as Kaiser Permanente, Sutter Health, Unifersity of Maryland, and John Hopkins University.

Choose where it comes from.

Your records are located automatically, but only the places you choose get retrieved. You can skip a provider to exclude that data.

Graphic showing logos of top health providers in the U.S such as Kaiser Permanente, Sutter Health, Unifersity of Maryland, and John Hopkins University.

Choose where it comes from.

Your records are located automatically, but only the places you choose get retrieved. You can skip a provider to exclude that data.

Graphic showing logos of top health providers in the U.S such as Kaiser Permanente, Sutter Health, Unifersity of Maryland, and John Hopkins University.

See everything.

View your full record, every active connection, and available apps to connect to in your HealthEx Wallet.

Graphic showing logos of top health providers in the U.S such as Kaiser Permanente, Sutter Health, Unifersity of Maryland, and John Hopkins University.

See everything.

View your full record, every active connection, and available apps to connect to in your HealthEx Wallet.

Graphic showing logos of top health providers in the U.S such as Kaiser Permanente, Sutter Health, Unifersity of Maryland, and John Hopkins University.

See everything.

View your full record, every active connection, and available apps to connect to in your HealthEx Wallet.

Graphic showing logos of top health providers in the U.S such as Kaiser Permanente, Sutter Health, Unifersity of Maryland, and John Hopkins University.

Share on your terms.

How you use the Wallet is a personal choice that’s up to you. You can choose to share the data you hold there with trusted apps. See exactly who you're connecting to before any data is shared.

Illustration of secure and consented ways for patients to share data withtheir healthcare provider, insurance provider, and health apps.

Share on your terms.

How you use the Wallet is a personal choice that’s up to you. You can choose to share the data you hold there with trusted apps. See exactly who you're connecting to before any data is shared.

Illustration of secure and consented ways for patients to share data withtheir healthcare provider, insurance provider, and health apps.

Share on your terms.

How you use the Wallet is a personal choice that’s up to you. You can choose to share the data you hold there with trusted apps. See exactly who you're connecting to before any data is shared.

Illustration of secure and consented ways for patients to share data withtheir healthcare provider, insurance provider, and health apps.

Disconnect.

You can stop sharing with any app at any time from your HealthEx Wallet.

Illustration representing user choice, secure sharing settings, and privacy controls for health data.

Disconnect.

You can stop sharing with any app at any time from your HealthEx Wallet.

Illustration representing user choice, secure sharing settings, and privacy controls for health data.

Disconnect.

You can stop sharing with any app at any time from your HealthEx Wallet.

Illustration representing user choice, secure sharing settings, and privacy controls for health data.

Delete.

You have the right to be forgotten. You can delete your account in Profile Settings to instantly end all app connections and have your data deleted within 24 hours. Third parties you've shared data with may retain their own copies.

Illustration of secure and consented ways for patients to share data withtheir healthcare provider, insurance provider, and health apps.

Delete.

You have the right to be forgotten. You can delete your account in Profile Settings to instantly end all app connections and have your data deleted within 24 hours. Third parties you've shared data with may retain their own copies.

Illustration of secure and consented ways for patients to share data withtheir healthcare provider, insurance provider, and health apps.

Delete.

You have the right to be forgotten. You can delete your account in Profile Settings to instantly end all app connections and have your data deleted within 24 hours. Third parties you've shared data with may retain their own copies.

Illustration of secure and consented ways for patients to share data withtheir healthcare provider, insurance provider, and health apps.

SECURITY

SECURITY

We give your data industry-leading protection

We give your data industry-leading protection

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Encryption

Encryption

We use AES-256 encryption to protect your data when it's stored and TLS 1.3 encryption to secure it during transmission. These are the same standards used by banks and government agencies.

We use AES-256 encryption to protect your data when it's stored and TLS 1.3 encryption to secure it during transmission. These are the same standards used by banks and government agencies.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Identity verification

Identity verification

Before any record is released, we confirm it's really you. Verifying at IAL2, the federal standard for proving identity, lets us find your providers and retrieve records automatically. You can choose to skip this verification and connect providers manually by logging in to your patient portals.

Before any record is released, we confirm it's really you. Verifying at IAL2, the federal standard for proving identity, lets us find your providers and retrieve records automatically. You can choose to skip this verification and connect providers manually by logging in to your patient portals.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Internal access controls

Internal access controls

We follow strict internal policies designed to protect the security of our users’ records. Only under exceptional circumstances, authorized and trained HealthEx personnel assisting with support or law enforcement queries may access your data.

We follow strict internal policies designed to protect the security of our users’ records. Only under exceptional circumstances, authorized and trained HealthEx personnel assisting with support or law enforcement queries may access your data.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Cloud infrastructure

Cloud infrastructure

We use industry-standard cloud hosting providers and vet our infrastructure regularly for security and compliance. These providers also publish independently audited reports of their own security controls.

We use industry-standard cloud hosting providers and vet our infrastructure regularly for security and compliance. These providers also publish independently audited reports of their own security controls.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Access logging

Access logging

Every retrieval is logged against the consent that authorized it, so there is a permanent record of who accessed what and when.

Every retrieval is logged against the consent that authorized it, so there is a permanent record of who accessed what and when.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Independent audits

Independent audits

Our controls are regularly tested by an outside firm. HealthEx holds SOC 2 Type II compliance, attested by Prescient Assurance.

Our controls are regularly tested by an outside firm. HealthEx holds SOC 2 Type II compliance, attested by Prescient Assurance.

Our security practices are validated against industry standards

Our security practices are validated against industry standards

We're committed to continuously improving our privacy and security posture. See what we've done so far.

HealthEx CARIN Code accreditation badge

EXTERNALLY AUDITED

CARIN Code of Conduct
(accredited by DirectTrust)

CARIN Code of Conduct
(accredited by DirectTrust)

A consumer health data code governing how apps handle your records; DirectTrust audits us against it. It is a voluntary agreement, but once signed, we are legally bound to it. CARIN-CFA accreditation is recognized by CMS as an evaluation pathway to be on the Medicare App Library. Signed 5 August 2025, accredited since 15 May 2026.

A consumer health data code governing how apps handle your records; DirectTrust audits us against it. It is a voluntary agreement, but once signed, we are legally bound to it. CARIN-CFA accreditation is recognized by CMS as an evaluation pathway to be on the Medicare App Library. Signed 5 August 2025, accredited since 15 May 2026.

HealthEx DiME Seal

SELF-ATTESTED

DiMe Seal 2026
(Digital Medicine Society)

DiMe Seal 2026
(Digital Medicine Society)

Covers privacy and security, clinical evidence and usability for digital health products. We submit our own documentation against the DiMe framework, and it is renewed every 12 months. Awarded 24 February 2026

Covers privacy and security, clinical evidence and usability for digital health products. We submit our own documentation against the DiMe framework, and it is renewed every 12 months. Awarded 24 February 2026

HealthEx SOC 2 Type II compliance badge

EXTERNALLY AUDITED

SOC 2 Type II
(attested by Prescient Assurance)

SOC 2 Type II
(attested by Prescient Assurance)

Every year, an outside auditor tests our security controls over a period of months. Last updated August 2025.

Every year, an outside auditor tests our security controls over a period of months. Last updated August 2025.

CSA STAR Level One Badge

SELF-ATTESTED

CSA STAR Level One

CSA STAR Level One

Our cloud security posture, published against the Cloud Security Alliance's public questionnaire. Since 20 May 2025.

Our cloud security posture, published against the Cloud Security Alliance's public questionnaire. Since 20 May 2025.

Take the next step

Take the next step

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Get your HealthEx Wallet

Get your HealthEx Wallet

Find the records held by the providers you've been seen by, and bring them into one place.

Find the records held by the providers you've been seen by, and bring them into one place.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Discover apps to connect

Discover apps to connect

See the apps and services you can connect your records to, and what each one receives.

See the apps and services you can connect your records to, and what each one receives.

Illustration of a the experience of a user accessing their HealthEx Unified Record.

Manage connections

Manage connections

Review what you've shared, with whom, and turn off any connection you no longer want.

Review what you've shared, with whom, and turn off any connection you no longer want.

Looking for support?

If something in your record looks wrong, or if something is missing, reach out to us.

Frequently asked questions

What is HealthEx?

HealthEx is a consumer-first unified health data platform. Your HealthEx Wallet is where you access your unified health history, see it in one place, and share it securely - with doctors, specialists, health plans, digital apps, AI agents, or anyone else you choose.

What is HealthEx Wallet?

HealthEx Wallet is the actual app you use to see your unified health history and control exactly who can see it. You get one automatically when you connect through HealthEx directly, or through one of our partners.

Who owns my data?

You do. HealthEx believes your medical information belongs to you, and you should be able to access and control it - we just make that easier to actually do.

Is my health information secure?

Yes. Your health data is encrypted at rest (while it's stored with us) and in transit (while it's moving to places you direct it to). We never sell your data, we never share it without your explicit permission, and you can revoke access at any time. Your permission to share your data is checked every single time your record is requested, not just once when you sign up.

Is my data still protected by HIPAA once it leaves my doctor?

Do I need to pay to use HealthEx?

No. There's no charge to access, view, or share your records at this time.

How does HealthEx make money, if not from my data?

Our partners (the apps you choose to connect to) pay us to power secure, consented record access inside their experiences. The individual isn't the product. We don't sell your health records, not even de-identified copies, and we don't train AI models on them. We retrieve and share data only when you ask, and we delete when you tell us to.

Does HealthEx train AI on my data?

No, HealthEx does not train AI models on your data.

HealthEx Wallet is live, and HealthEx & Sharecare bring clinical context to AskMD

HealthEx Wallet is live, and HealthEx & Sharecare bring clinical context to AskMD