AI Is Asking for Your Health Record. What Happens Next?
If you've ever opened a lab result and wished someone would explain it in plain English, you understand why people ask AI about their health.
In its introduction to ChatGPT Health, OpenAI describes a way for people with access to connect medical records and wellness apps, then ask questions with more of their own information in view.
I can see why people want this. Before connecting a record, though, I would want to understand who gets the data and what they can do with it.
The privacy question changes when the data moves
Medical records held by HIPAA-covered providers are protected by HIPAA. A personal app you choose for yourself may be governed by different rules. HHS explains that when a person directs a covered provider to send information to an app that is neither a covered entity nor its business associate, the HIPAA Rules generally do not apply to the app's subsequent use of that information.
Consumer apps can have their own privacy protections. OpenAI says Health conversations are not used to train its foundation models, and connecting apps to health data requires explicit permission. Read those controls alongside the applicable legal protections rather than assuming HIPAA follows every copy of your record.
Before connecting any app, I would ask: What information will it receive? Can I disconnect it? What happens to the data already shared? And who is responsible if I find a mistake?
A helpful answer is only part of care
An AI tool might explain a term in a report or help you prepare questions for a visit. That's useful. But the answer still needs context: the right patient, the right record, the right care team, and a way to follow through.
Suppose an app helps someone understand an abnormal result. Who checks the result against the rest of their history? Who decides what to do next? How does that decision become a follow-up appointment? Those are workflow questions as much as AI questions.
This is why we built CareLaunch around structured healthcare data and the work that happens around it. A FHIR-native foundation helps connect information to the patient and the care process. Scheduling, secure messaging, and care coordination give a team ways to act on it.
Our AI Concierge helps admins set up their organization and find answers in platform documentation. It doesn't read patient records to make clinical or treatment decisions.
Consumer tools can help people arrive at a visit better informed. Healthcare platforms have a different responsibility: keep the record, the team, and the next action connected. As these tools improve, we should keep asking both who holds the information and who is accountable for the care that follows.