Healthcare – Health Records

Built with industry standards.

Apple is using the SMART on FHIR (Fast Healthcare Interoperability Resources) standard which enables users to download their health records and share available health data with participating organizations. Downloadable data types include allergies, conditions, immunizations, lab results, medications, procedures, and vitals. Data types for sharing with providers include exercise minutes, heart rate, blood pressure, lab results, immunizations, and more.

Designed to protect privacy.

With Health Records on iPhone, your patients health data is encrypted in transit and at rest. Apple is providing a user the ability to request and download their health records utilizing a direct, encrypted connection between the user’s iPhone and the APIs provided by the health system or clinic. When your patients share Health app data with a provider, the data is encrypted in transit and at rest, and Apple cannot access or view any health data stored in connection with Health app data sharing with provider.

Encrypted and secure throughout.

When health record data is transferred from a healthcare institution to the Health app through the Health Records feature, it is encrypted and does not traverse Apple’s network. When your patients share Health app data with a provider, the data is encrypted end-to-end with the healthcare organization. Apple does not maintain or have access to the encryption keys used to encrypt or decrypt a user’s health data.

Creates a seamless connection.

Authentication uses the user’s patient portal credentials. The EHR connection leverages OAuth 2.0, which allows users to authenticate once and create an enduring connection to your EHR APIs. The Health app will periodically connect to your EHR APIs to download new health records. Sharing health data with a provider also uses this same OAuth 2.0 mechanism to establish a secure connection to your EHR. New health data is shared automatically, unless the user opts to stop sharing.