Summary

Health in ChatGPT enables eligible U.S. users to securely connect their medical records (EHRs) and Apple Health data to ChatGPT to receive more personalized health insights. Connections are opt-in and designed to protect user privacy while improving context for health-related conversations.

Key Points

• Eligible U.S. users can link medical records (EHRs) and Apple Health (HealthKit/Health Records) to ChatGPT.
• Connections are opt-in, use secure authorization flows, and support user revocation of access.
• The feature aims to surface personalized insights and help users better understand trends, medications, conditions, and test results.
• Engineering focus: secure auth (OAuth/HealthKit consent), FHIR-compatible record access where applicable, encrypted transport and storage, and strict data minimization.
• Privacy/compliance: minimize retained data, implement access logging, user consent UX, and adhere to applicable regulations (e.g., HIPAA considerations where relevant).
• Rollout: limited to eligible U.S. users initially; validate availability and user eligibility checks in client and backend.

Implementation notes for engineers

• Auth & connectors: implement HealthKit flows for iOS and any EHR connector using standard OAuth/OpenID and FHIR APIs when available.
• Data handling: encrypt data in transit and at rest, apply schema mapping for FHIR resources, and normalize Apple Health metrics to internal models.
• UX & controls: expose clear consent screens, data scope descriptions, and account settings to disconnect and purge synced data.
• Monitoring & testing: instrument access logs, audit trails, and end-to-end tests for consent revocation and sync edge cases.