MedRecall is a personal app that helps one patient keep track of their own doctors, medications, conditions, and visit notes. This page explains, in plain language, what happens when you connect MedRecall to your hospital or health system's patient portal.
You authorize it. You see it. It stays yours.
When you choose to connect a hospital or health system to MedRecall, you're sent to your own health system's real login page — never a page built or hosted by MedRecall — where you sign in and approve exactly what MedRecall may read. This uses SMART on FHIR, the open, industry-standard authorization framework built for this purpose and used across the healthcare industry. MedRecall never sees or stores your portal username or password.
Once approved, MedRecall reads your records directly into the app on your own iPhone, so they sit alongside the doctors, medications, and notes you've already entered yourself.
What MedRecall requests
MedRecall requests read-only access to standard clinical data categories (part of the US Core Data for Interoperability, USCDI) — nothing outside what's needed to give you a fuller picture of your own care:
PatientDemographics — name, date of birth, and contact details already on file with your provider.ConditionDiagnoses & problems — the conditions your care team has documented.MedicationRequestPrescriptions — medications your providers have ordered.AllergyIntoleranceAllergies & reactions on file with your provider.ObservationLabs & vitals — results and readings such as blood pressure, glucose, and lab panels.ImmunizationVaccination history recorded by your provider.How your data is handled
Stays on your device
Records pulled from your health system are stored on your iPhone, the same way the data you type into MedRecall already is.
Your backup, your choice
If you turn on backups, they go to a Google Drive or Files folder you control — never to a MedRecall-run server, because there isn't one.
Never sold, never shared
Nothing is sold, shared with advertisers, or used to train anything. There's no analytics vendor watching what you read.
Revocable anytime
Disconnect a health system from your provider's own patient-portal privacy settings at any time — access ends immediately, on their side, not just ours.
Technical reference
Registration details for connecting MedRecall as a patient-facing SMART on FHIR application: