For patients
Share your medical records with AI, on your terms.
Before sharing medical records with AI, review the assistant provider's privacy terms and account settings, connect only the sources you intend to share, and learn how to withdraw access. Flexpa lets you request revocation and deletion, but this does not erase copies another app already received. No connection method guarantees privacy or security.
Updated 2026-11-11
How it works
- Review policiescheck Flexpa and the assistant
- Authorizeconnect intended sources
- Request revocationuse Flexpa's privacy portal
- Manage other copiescontact the receiving app
What Flexpa does with your records
- Flexpa never sells your personal information.
- You follow a source's sign-in flow or the identity verification offered by Flexpa Consent. Review the sharing scope: some employer-plan connections include other members' information.
- Flexpa keeps a cached copy of your data to make connections more reliable.
- You can request revocation and deletion at any time. Some information may be retained for legal or audit purposes.
What your AI app does
When your assistant reads your records, that data passes through the company that makes the app, under that company's privacy terms. Check your assistant's data settings.
Check who manages the account and device before sharing personal medical records. Do not assume a work, school, or personal account has the privacy settings you want.
A short checklist
- Check who can access or manage your account and device.
- Connect only the sources you need for your question.
- Review your assistant's data settings before you connect.
- When you stop sharing, remove the connector and submit any needed revocation or deletion requests.
How to take access back
Go to privacy.flexpa.com and verify your identity to submit a deletion request. Flexpa's guide says personal information is deleted and connected apps are disconnected within 45 days, with exceptions for legal or audit retention. You can also email privacy@flexpa.com or call (707) 654-4982.
Revoking access with Flexpa does not delete data an app already received. Remove the connector in your assistant and contact that company to manage what it holds.
Questions
How can I reduce privacy risks when sharing medical records with AI?
Read both Flexpa's and your assistant provider's privacy policies, check account access and data settings, and connect only intended sources. Flexpa supports revocation requests through privacy.flexpa.com, but a receiving app's copies require separate attention. No account type or connector guarantees privacy.
Does Flexpa sell my data?
No. Flexpa never sells your personal information.
Who can see my records once my assistant reads them?
When you share medical records with an assistant, the receiving provider handles them under its own privacy terms. Review those terms and the account's access controls to understand who can access the data. Flexpa's privacy policy does not govern that provider's separate use of your records.
How do I revoke access?
Visit privacy.flexpa.com and verify your identity, or email privacy@flexpa.com to request revocation and deletion. Flexpa's guide specifies deletion and app disconnection within 45 days, with legal and audit retention exceptions. This does not delete copies already received by other apps.
Does revoking access delete what my assistant already has?
Revoking access through Flexpa does not delete medical records already received by your assistant provider. Remove the Flexpa connector and use the assistant provider's controls or contact process to manage its copies.
More
Ready to connect? Set up your assistant.
Step-by-step setup for Claude, ChatGPT, and Claude Code.
Connect your records