Health Data Disclosure
Purpose of This Disclosure
This disclosure explains what health information myCARI accesses when you connect to your healthcare provider and how we use that information. This document is required by Epic and other healthcare providers participating in the SMART on FHIR ecosystem.
Related Documents: Privacy Policy | Terms of Service | HIPAA Authorization Notice
IMPORTANT: Product Classification
myCARI is NOT a Medical Device
myCARI is a consumer wellness and health information management application. It is:
- NOT a medical device under FDA regulations
- NOT intended to diagnose, treat, cure, or prevent any disease
- NOT a substitute for professional medical advice, diagnosis, or treatment
- NOT a medical record system and should not be relied upon as your sole source of health information
Medical Disclaimer
The health information displayed in myCARI, including data imported from your healthcare providers via FHIR:
- Is provided for informational and organizational purposes only
- May contain errors, delays, or incomplete information
- Should always be verified with your healthcare provider
- Does NOT constitute medical advice
- Should NOT be used to make medical decisions without consulting a licensed healthcare professional
ALWAYS consult your physician, pharmacist, or other qualified healthcare provider regarding any medical condition, medication, or treatment.
Emergency Warning
IN A MEDICAL EMERGENCY, CALL 911 IMMEDIATELY.
myCARI's SOS feature does NOT contact emergency services. It only sends notifications to your designated care team members. For life-threatening emergencies, you must call 911 directly.
What Health Data We Access
When you connect myCARI to your healthcare provider (such as Epic MyChart, Cerner, or other FHIR-enabled systems), we request access to the following health information:
Patient Information
| Data Type | What It Includes | Why We Need It |
|---|---|---|
| Demographics | Name, date of birth, address, phone number, gender | Display your profile, verify identity, contact preferences |
| Patient ID | Your unique identifier at the provider | Link records to your myCARI account |
Medical Records
| Data Type | What It Includes | Why We Need It |
|---|---|---|
| Conditions | Diagnoses, health problems, chronic conditions | Show your health conditions on your timeline |
| Medications | Prescriptions, dosages, instructions, refill dates | Medication tracking, reminders, and safety alerts |
| Allergies | Drug allergies, food allergies, environmental allergies | Safety alerts, drug interaction warnings |
| Immunizations | Vaccines, dates administered, lot numbers | Vaccination tracking and records |
| Lab Results | Blood tests, urine tests, pathology results | Health monitoring, trend analysis |
| Vital Signs | Blood pressure, heart rate, weight, height, BMI | Health trends and personalized insights |
| Procedures | Surgeries, medical procedures, dates | Medical history timeline |
| Clinical Notes | Visit summaries, provider notes | Comprehensive health record |
Care Information
| Data Type | What It Includes | Why We Need It |
|---|---|---|
| Encounters | Office visits, hospital stays, emergency visits | Appointment history and care tracking |
| Care Team | Doctors, nurses, specialists, their contact info | Provider directory, care coordination |
| Appointments | Scheduled visits, future appointments | Calendar integration, reminders |
How We Use Your Data
Primary Uses
- Display - Show your health information in a unified timeline within the myCARI app
- Sync - Keep your data current with periodic updates from your healthcare provider
- Reminders - Send medication reminders and appointment notifications
- Insights - Provide personalized AI health insights (with your consent)
- Sharing - Share with care team members you explicitly authorize
We Do NOT
- Sell your health information to anyone
- Share your data with advertisers or marketers
- Use your data for marketing purposes
- Share with insurance companies without your explicit consent
- Share with employers or employment agencies
- Make treatment decisions on your behalf
- Share data with third parties for their own purposes
Data Accuracy Disclaimer
Imported Data May Not Be Complete or Accurate
IMPORTANT: MLPipes LLC does not verify, validate, or guarantee the accuracy of health data imported from your healthcare providers. The data we display:
- Reflects what the provider's system returns - We cannot control what data providers make available
- May be incomplete - Some providers do not share all data types
- May be delayed - There can be delays between provider updates and our sync
- May contain errors - Errors in the source system will be reflected in myCARI
- May differ from your actual medical records - Always verify with your healthcare provider
Your Responsibility
You are responsible for:
- Verifying accuracy of all imported health data
- Reporting discrepancies to your healthcare provider
- Not relying solely on myCARI for medical information
- Maintaining your own copies of important medical records
AI-Generated Content
Any AI-generated insights, recommendations, or analysis:
- Are for informational purposes only
- Do NOT constitute medical advice
- Should be verified with healthcare professionals
- May contain errors or inaccuracies
Data Storage
| Aspect | Details |
|---|---|
| Location | United States (Google Cloud Platform, US regions) |
| Encryption | AES-256 encryption at rest, TLS 1.3 in transit |
| Compliance | HIPAA-compliant infrastructure (GCP with signed BAA) |
| Retention | While your account is active + 30 days after deletion |
| Backups | Encrypted backups retained for up to 90 days |
Who Can See Your Data
| Who | What They See | How |
|---|---|---|
| You | All your health data | Via the myCARI app anytime |
| Care Team Members | Data you choose to share based on permission level | You must explicitly invite them |
| MLPipes Staff | Limited access for support only | Only with your permission for support purposes |
| No One Else | - | We do not share without your consent |
Care Team Permission Levels
| Permission Level | Access Granted |
|---|---|
| Basic View | Medications, appointments, emergency alerts only |
| Full View | All health data including vitals, medical records, lab results |
| Professional Caregiver | Full access with mandatory audit logging for HIPAA compliance |
Your Control Over Data
You Can Always:
- View all data we have imported from your healthcare provider
- Disconnect your healthcare provider at any time
- Remove care team members and revoke their access
- Delete your account and all associated data
- Export your data in standard formats (PDF, FHIR JSON)
How to Disconnect a Healthcare Provider
- Open the myCARI app
- Go to Settings → Connected Accounts
- Tap the provider you wish to disconnect
- Tap "Disconnect" and confirm
You can also revoke access through your healthcare provider's patient portal (e.g., Epic MyChart → Manage Connected Apps).
What Happens When You Disconnect
- We stop syncing new data from that provider
- Previously imported data remains in your myCARI account (you own this data)
- You can request deletion of imported data through Settings → Privacy → Delete Provider Data
- Care team members lose access to data that was shared from that provider
Data Refresh
| Aspect | Details |
|---|---|
| App Open | Data syncs when you open the app (if connected) |
| Background Sync | Periodic background refresh (approximately every 4-6 hours when app is active) |
| Manual Refresh | Pull-to-refresh on any health data screen |
| Initial Import | Full data import when you first connect (may take a few minutes) |
Note: We only access data when you have an active connection. If you disconnect, we do not continue accessing your provider's systems.
Questions?
- Privacy Team: privacy@mlpipes.ai
- Support: support@mlpipes.ai
- Phone: Contact through in-app support
Address:
MLPipes LLC
5725 S Valley View Blvd Ste 5 PMB 471045
Las Vegas, Nevada 89118-3122 US
This Health Data Disclosure was last updated on January 19, 2026.
Version History:
- v1.1 - Added product classification, medical disclaimer, data accuracy disclaimer, SOS warning, care team permission levels, data refresh section
- v1.0 - Initial disclosure document