Short answer: Ask ten questions before you sign up: how it connects to your EHR and to patients' MyChart records, who owns the data, what patients pay, how you export and leave, whether the vendor will sign a Business Associate Agreement, how patients sign up, what you see between visits, what it documents for billing codes, what reminders contain and how AI is used. Get the answers in writing. Below, PatientPower answers each one: what exists today, and plainly where something is a policy or a question to ask.
Ask ten questions before you sign up: how it connects to your EHR and to patients' MyChart records, who owns the data, what patients pay, how you export and leave, whether the vendor will sign a Business Associate Agreement (BAA), how patients sign up, what you see between visits, what it documents for billing codes, what reminders contain and how AI is used. Get the answers in writing, from the vendor's own pages or contract, not from a sales call.
Each question below says why it matters and what a useful answer looks like, then gives PatientPower's answer. PatientPower (beyondmychart.com) is the app this site describes, so treat its answers as the vendor's own. Every PatientPower answer describes what exists today, or says plainly where something is a policy or a question to put to PatientPower, and names the beyondmychart.com page where you can check it.
Why ask: an app that cannot see the patient's history makes you re-enter it, and an app that claims an EHR integration may mean anything from a live data feed to a PDF upload. Ask which system it connects to, in which direction, who starts the connection and which record types come across.
PatientPower's answer: the connection runs through the patient, not into your practice's EHR. Patients connect their own Epic MyChart accounts from inside the app: they sign in on their health system's own MyChart page, choose what to share, and conditions, medications, lab results, vital signs, immunizations and visits come into their PatientPower vault as each health system makes them available. PatientPower's Epic MyChart connection is live: it was approved for use on 16 September 2026, and patients can connect their MyChart accounts today. That approval does not mean Epic endorses PatientPower. Patients can also add records by photographing a document or label, or by typing them in. You see the records a patient has chosen to share with you, limited to the categories they granted. PatientPower's pages do not describe a connection into a practice's own EHR, and its PatientPower for practitioners page says it is not certified electronic health record (EHR) technology. Check it on: Connect your Epic MyChart records; PatientPower for practitioners.
Why ask: the answer decides whether the vendor can sell, advertise with or train AI models on what your patients log. Ask for the clause in the terms or privacy policy, not a summary.
PatientPower's answer: its Terms say the patient owns their information and that their health record in PatientPower belongs to them. When you use the Case Manager to run a care plan, its privacy policy says your practice directs how that information is used and PatientPower acts as a service provider / business associate to you. The same policy says PatientPower does not sell health information or use it for advertising, that individual care-plan data is not used to train or improve AI models, and that information entered by one practitioner is never visible to, or shared with, another practitioner. One thing to know: the goals guide says a goal you type in yourself is saved for reuse with every future patient, so keep patient details out of goal labels. Check it on: Terms & Conditions; Privacy Policy & Disclosure.
Why ask: if patients have to pay before they can see your plan, fewer of them will use it, and you may be the one answering billing questions. Ask what is free, what is paid, and which features your patients would need. Ask separately what the practice pays and what that covers.
PatientPower's answer: its Plan & Billing page says patients use PatientPower free. The same page is where a practice chooses its plan; ask PatientPower what each practice plan costs and covers. Check it on: Plan & Billing.
Why ask: switching apps is when data gets lost. Ask what format exports come in, who can export what, and what happens to patient information when the contract ends. Under the HIPAA Privacy Rule, a business associate contract must require the vendor, when the contract ends, to return or destroy all protected health information it holds for you, if feasible, and keep no copies; where that is not feasible, the vendor must extend the contract's protections to what it keeps and limit further uses and disclosures to the purposes that make return or destruction infeasible (45 CFR 164.504(e)(2)(ii)(J)). Ask how the vendor does that.
PatientPower's answer: patients can export their whole vault as a JSON file, or one record type at a time (including as a CSV file), print a two-page Visit Packet, and request deletion of their account and information at any time; they can also disconnect a MyChart source or revoke access at their health system. On the practice side, the privacy policy says your practitioner account may update or delete care-plan data. PatientPower's pages do not describe a bulk export of a practice's whole panel, so ask for that directly and put the exit terms in the BAA. Check it on: Features (export and print your record); Privacy Policy & Disclosure.
Why ask: if your practice is a HIPAA covered entity and a vendor creates, receives, keeps or transmits protected health information for it, HIPAA generally requires a written business associate contract with it (see 45 CFR 160.103 and 164.502(e)), and 45 CFR 164.504(e) lists what that contract must cover. Ask which information and which features the BAA covers. A BAA is a contract, not a security rating, so also ask what safeguards stand behind it.
PatientPower's answer: its privacy policy says Business Associate Agreements are available for practitioner accounts, and that PatientPower acts as a service provider / business associate to your practice for the care plans you run in the Case Manager. PatientPower's pages do not say which information or features a BAA covers, so ask PatientPower. The same policy describes its safeguards: protected health information encrypted in transit (TLS 1.2+) and at rest (AES-256), role-based access controls and audit logging. Its Features page says health records, care plans, check-ins and sharing permissions are held in a dedicated Microsoft Azure environment built for protected health information, separate from the public website. For AI processing it says patients' coach conversations run in Azure, and it names two exceptions, both outside Azure: voice input is turned into text by OpenAI's speech-to-text service, and if the secure service returns an error a typed coach message can be retried on Anthropic's standard Claude service (see question 10). Where a browser cannot record audio for OpenAI's service, some voice features use the browser's own speech recognition instead, which also runs outside Azure. Ask for the BAA itself and read it before you put patient information in. Check it on: Privacy Policy & Disclosure; Features.
Why ask: every extra step loses patients, especially those who are older, unwell or not comfortable with apps. Ask what the patient receives, what they must create, and whether they need a new password for their medical records.
PatientPower's answer: a patient creates a secure account, with sign-in powered by Microsoft Entra, and can pick up where they left off on any device. Invitations and reminders from PatientPower carry a link, not health information. Patients choose which record categories a practitioner can see and for how long, and can revoke that at any time. Patients can also connect MyChart as a separate step, using their existing MyChart username and password on their health system's own page; Epic's MyChart help says the password is never seen by the app. Kaiser Permanente members connecting through MyChart sign in with their kp.org login, with nothing extra to install. Check it on: Features; Connect your Epic MyChart records.
Why ask: engagement only helps if you can see who is following the plan before the next appointment, without opening every chart. Ask for the practitioner screen, not the patient one.
PatientPower's answer: in the Case Manager you open a patient, schedule visits, set a check-in cadence and build a care plan from a shared library of goals, exercises and nutrition guidance, with private notes kept to yourself. Goals save as you add them and the patient sees each one straight away. Patients log progress against each goal with a slider, a 0 to 10 scale or done, and you see it before the next visit. A patient cannot edit a target you set; they ask for a change on the goal, and the request appears there for you. Panel Activity is a page you open: it groups your whole panel as on track, slipping, gone quiet or never started, based on patients' check-ins against the cadence you set, and opening a group shows the patients in it. What you see is what the patient reports: a logged check-in is the patient's own account, not a measurement. Check it on: PatientPower for practitioners; Goals guide; Help (practitioner tour). Related: Keep patients on their home program between visits.
Why ask: some apps imply they make a service billable. Remote physiologic monitoring (RPM) and remote therapeutic monitoring (RTM) require a device that meets the FDA definition of a medical device, and chronic care management (CCM) has requirements of its own, so ask exactly what the app records and what it leaves to you.
PatientPower's answer: each patient's Monitoring & time log page in the Case Manager records consent per service, the minutes you or clinical staff spend and whether a call or video took place, and produces a printable monthly summary (consent, check-in days, communications, review activity and logged time) that shows each listed requirement as met, not met or not recorded, based only on what was entered in PatientPower; items it cannot see, such as device data, always show not recorded. Met is not a billing determination: the summary never says a service is billable, and it never estimates minutes from clicks. PatientPower does not collect or transmit device data, so RPM and RTM need a separate device. For CCM, CMS requires the patient's demographics, problems, medications and medication allergies to be recorded using certified EHR technology, and PatientPower is not certified EHR technology. It does not submit insurance claims. The monthly summary is documentation support, not a claim, and using PatientPower does not make any service billable on its own. Confirm coverage with the payer and a certified coder before billing. Check it on: Remote monitoring & billing; PatientPower for practitioners.
Why ask: an email or text that names a condition, a medication or an appointment can be read by anyone who sees the patient's phone. Ask what a message contains and how the patient's consent to texts is recorded.
PatientPower's answer: reminder emails carry a link, not health details; the patient opens the app to read what is there. For text reminders, its privacy policy sets these rules: texts contain no diagnoses, laboratory results, medications, appointment dates or care-plan details, are limited to a fixed set of pre-approved templates enforced in the software, and cannot be sent until the provider has recorded the patient's consent; a patient can reply STOP to opt out. You set reminder and encouragement schedules, message the whole panel and choose which encouragement notes rotate for your patients. Check it on: Privacy Policy & Disclosure; PatientPower for practitioners.
Why ask: AI can draft plans and answer patient questions quickly, and it can also be wrong. Ask where AI is used, who reviews its output before a patient sees it, where the data is processed and whether it is used for training.
PatientPower's answer: a Provider Coach helps you draft plans by voice or text, and PatientPower's practitioner page says AI-drafted content can be wrong, so you review what goes to a patient. Patients can also ask the AI coaches directly; those answers are general education, not a diagnosis, and PatientPower's pages do not describe a practitioner review step for them. When a patient asks you to review an X-ray, PatientPower's Help page says you check the AI draft against the full image and send it after your review. PatientPower's Features page also describes AI plain-language educational explanations of X-ray, MRI or CT images that patients upload themselves, which it says are not a diagnosis or a radiology read, and AI flagging of high or low values on lab reports they photograph; ask PatientPower who reviews those. When a new condition is added to the shared goals library, an AI research pass proposes goals and a person reviews and signs off before they are used. Its Features page says patients' coach conversations run on Claude through Microsoft Azure AI Foundry, in the same protected environment as the records, with two exceptions: voice input (including dictating to a coach) is turned into text by OpenAI's speech-to-text service, and if the secure service returns an error, a typed message can be retried on Anthropic's standard Claude service, outside Azure. Where a browser cannot record audio for OpenAI's service, some voice features, including the Provider Coach, use the browser's own speech recognition instead, which does not run in Azure either. Images are never sent to Anthropic's standard Claude service, and anyone who prefers can type instead of speaking. Individual care-plan data is not used to train or improve AI models. Check it on: Features; PatientPower for practitioners; Help; Privacy Policy & Disclosure.
A short version of PatientPower's answers, with the beyondmychart.com page that describes each one. If a page changes, the page is the authority.
| Question | PatientPower today | Where to check |
|---|---|---|
| 1. EHR and MyChart | Patients connect Epic MyChart themselves (live, approved for use on 16 September 2026); you see the categories they share. No connection into a practice's EHR is described; not certified EHR technology | Connect your Epic MyChart records; PatientPower for practitioners |
| 2. Data ownership | The patient owns their record (Terms); privacy policy says PatientPower acts as a service provider / business associate for care plans; no selling, no advertising, no AI training on individual care-plan data | Terms & Conditions; Privacy Policy |
| 3. Patient cost | Free for patients; ask what the practice plan costs and covers | Plan & Billing |
| 4. Export and exit | Patients export JSON (or CSV per record type) and can request deletion; practice-wide export is not described, so ask | Features; Privacy Policy |
| 5. BAA | Privacy policy says BAAs are available for practitioner accounts; ask which information it covers | Privacy Policy |
| 6. Patient sign-up | Secure account with Microsoft Entra sign-in; link-only invitations; patient chooses what you see; MyChart is a separate step | Features; Connect your Epic MyChart records |
| 7. What you see | Each patient's goals and check-ins, change requests on targets, and the Panel Activity page | Goals guide; PatientPower for practitioners |
| 8. Billing documentation | Records consent and time, prints what was recorded; you and your coder decide what is billable | Remote monitoring & billing; PatientPower for practitioners |
| 9. Reminders and texts | Emails are link-only; text rules (no health details, consent first, STOP) are set in the privacy policy | Privacy Policy |
| 10. AI | Provider Coach drafts, you review; X-rays a patient asks you to review, you check before sending; AI educational explanations of images (not a diagnosis) and lab flags on reports patients add themselves: ask who reviews; patient coach answers are general education; voice is transcribed by OpenAI, or by the browser's own speech recognition where the browser cannot record audio for OpenAI, and a typed message can fall back to Anthropic, all outside Azure; individual care-plan data not used for training | Features; PatientPower for practitioners; Help |
PatientPower describes itself as software that helps licensed practitioners organize care and share educational information; its pages describe its AI output as general education, not a diagnosis, and say it does not treat or submit insurance claims. It holds what patients log and the records they choose to share; it does not collect data from devices. Which remote-monitoring or care-management codes you can bill depends on your license and the payer. Whether any software is regulated as a medical device depends on what it does and what it is intended for; the FDA's guidance on device software functions and its Digital Health Policy Navigator set out the criteria.
MyChart and Epic are trademarks of Epic Systems Corporation. PatientPower is an independent app and is not affiliated with or endorsed by Epic. For a feature-by-feature view of the practitioner side, see PatientPower for practitioners; for the codes, see Remote monitoring & billing.
Related: PatientPower for practitioners · Remote monitoring & billing · Connect your Epic MyChart records to PatientPower · How chiropractors and physical therapists keep patients on their home program between visits.
Ask about EHR and MyChart connection, data ownership, patient cost, export and exit, whether a Business Associate Agreement is available, patient sign-up, what you see between visits, billing-code documentation, what reminders contain and how AI is used. Get each answer in writing from the vendor's own pages or contract.
Not directly. Patients connect their own Epic MyChart accounts; that connection is live and was approved for use on 16 September 2026, which does not mean Epic endorses PatientPower. You see the record categories each patient chooses to share. PatientPower is not certified EHR technology.
PatientPower's privacy policy says Business Associate Agreements are available for practitioner accounts. Ask for the agreement and read it, including which information it covers and what happens to patient information when the contract ends.
PatientPower's Terms say the patient owns their health record. Its privacy policy says that for care plans you run in the Case Manager, your practice directs how the information is used and PatientPower acts as a service provider / business associate to you. The same policy says it does not sell health information or use individual care-plan data to train AI models.
Yes. Patients can export their vault as a JSON file, or one record type at a time as CSV, print a Visit Packet, and request deletion of their account at any time. PatientPower's pages do not describe a bulk export of a practice's whole panel, so ask for it directly.
No. It records consent, time and communications and prints a monthly summary as documentation support. RPM and RTM need an FDA-defined medical device, and PatientPower does not collect or transmit device data. Confirm coverage with the payer and a certified coder.
No. Reminder emails carry a link, not health details. For text reminders, PatientPower's privacy policy says texts use pre-approved templates with no diagnoses, results, medications, appointment dates or care-plan details, and need the patient's recorded consent first.