PatientPowerbeyondmychart.com 🏠 Home ❓ MyChart questions

What comes across when you connect MyChart to an app?

Short answer: Epic's MyChart help says apps can request only a federal standard set of data called the United States Core Data for Interoperability (USCDI); what arrives also depends on what your health system releases and what you approve. USCDI covers items such as allergies, medications, problems, lab results, vital signs, immunizations, visits and clinical notes. PatientPower imports patient details plus six categories: conditions, medications, lab results, vital signs, immunizations and visits. It does not import clinical notes, procedures or imaging reports, and allergies do not currently come through its Epic connection.

Updated October 20, 2026

What USCDI is and why it decides what an app can see

The United States Core Data for Interoperability (USCDI) is maintained by ASTP/ONC, the federal office for health IT at HHS. ASTP/ONC describes it as a standardized set of health data classes and constituent data elements for nationwide, interoperable health information exchange. Epic's MyChart help says apps can only request this standard set of information, and that different apps may request different data types depending on what they do.

The requirement comes from the 21st Century Cures Act. ONC's Cures Act Final Rule, published in the Federal Register on 1 May 2020, called for standardized APIs, which it said will help allow individuals to securely and easily access structured electronic health information using smartphone applications. Health IT certified to the standardized API criterion in 45 CFR 170.315(g)(10) must provide such an API for patient access. That API is the HL7 FHIR connection an app uses after you sign in on your health system's MyChart page.

USCDI is versioned. ASTP/ONC's HTI-1 final rule made USCDI version 3 the baseline for its Health IT Certification Program as of 1 January 2026, and later versions add more data classes. The table below uses the version 3 data classes.

USCDI data classes, and which ones PatientPower imports

An app that can request a data class does not always receive it. Three things decide what arrives: which classes the app asks for, which ones your health system releases to apps, and which information types you leave selected on your health system's sharing screen. The right-hand column shows what PatientPower's Epic MyChart connection brings in today.

USCDI data classWhat it coversImported by PatientPower from MyChart?
Patient Demographics/InformationName, date of birth, sex and other identifying detailsPartly: name, sex and date of birth, where provided
ProblemsDiagnoses and health problems on your recordYes, as your conditions list
MedicationsMedicines on your recordYes, from medication orders, with dose and frequency where provided
Allergies and IntolerancesSubstances (medications and drug classes) and reactionsNot yet: PatientPower asks for allergies, but they do not currently come through its Epic connection. Add them by hand
LaboratoryLab test resultsYes, with reference ranges where provided
Vital SignsReadings such as blood pressure, heart rate and weightYes
ImmunizationsVaccines on your recordYes
Encounter InformationVisits: type, time, location, diagnosis and dispositionYes, as your visit history
Clinical NotesNarrative notes such as progress notes, discharge summaries and consultation notesNo
ProceduresProcedures performedNo
Diagnostic ImagingImaging tests and reportsNo
Clinical TestsTests that are not lab or imaging tests, such as an electrocardiogramNo
Care Team MembersClinicians on your care teamNo
Assessment and Plan of Treatment, GoalsCare plans and goalsNo
Health Insurance InformationCoverage detailsNo
Health Status AssessmentsAssessments such as health concerns, smoking status, and functional, disability, mental/cognitive and pregnancy statusNo
Unique Device Identifiers for implantable devicesImplanted device identifiersNo
ProvenanceWho recorded the data and whenNot as a data class; on the Connect MyChart page, each imported record shows which health system it came from and when it was last synced

What usually does not come across

USCDI is a defined core set, not your whole chart. Things such as messages with your care team, appointment scheduling, and billing statements or payment history are not USCDI data classes, so an app connecting through this route should not expect them.

Your health system can also hold some information back. The Cures Act's information-blocking rule (45 CFR Part 171) defines information blocking by health care providers, certified health IT developers and health information networks, with exceptions such as the privacy and preventing-harm exceptions, under which some information may lawfully not be shared. Separately, the HIPAA right of access in 45 CFR 164.524 excludes psychotherapy notes.

With PatientPower specifically, anything outside the categories it reads stays in MyChart: clinical notes, procedures, imaging reports, care plans, insurance details and other observation types such as smoking status are not imported through the Epic connection, and allergies do not currently come through. PatientPower reads up to a set number of entries per category on each sync, so a very long history may not come across in full. If one of your providers' records cannot be reached this way, you can type the information into PatientPower yourself.

How often the data refreshes

There is no single refresh schedule; it depends on the access period you choose and on the app. Epic's MyChart help says you select how long the app has access, such as one hour, one day or one year, and that during this time the app might also receive any new information added to your record. With PatientPower, the access period you choose does not currently give ongoing updates.

PatientPower does not refresh in the background. Today each MyChart connection is a one-time import: PatientPower reads your records when you connect. Sync now on its Connect MyChart page reads again only while your MyChart sign-in is still valid, which is a short time; after that it asks you to sign in to MyChart again.

How to revoke access

In MyChart: Epic's MyChart help says to go to Linked Apps and Devices in MyChart or MyChart Central, find the app and select Stop sharing. The app then stops receiving new information from your health record. It may still have information it already received, so to have that data deleted you need to contact the app.

In PatientPower: open Connect MyChart and select Disconnect next to the health system. PatientPower deletes the stored connection, including its access tokens, so it can no longer read from that health system. Records already imported stay in PatientPower after you disconnect. You can export your data as a JSON or CSV file, or request deletion of your account and information at any time.

Revoking access in either place does not change your MyChart account. PatientPower only reads your records; it never changes anything in MyChart.

About PatientPower's Epic connection

PatientPower is a personal health record app whose Epic MyChart connection is live; it was approved for use on 16 September 2026. That approval does not mean Epic endorses PatientPower; PatientPower is an independent app and is not affiliated with or endorsed by Epic. You sign in on your health system's own MyChart page, so PatientPower never sees your MyChart password.

MyChart may show a notice that PatientPower, offered by Atlas Bio Systems, might not be covered by HIPAA. PatientPower's privacy policy states that it does not sell your health information or use it for advertising.

Records you connect may be incomplete, delayed or contain errors, so verify important details with your care team. PatientPower is for education and organization; it does not diagnose conditions and is not medical advice.

Related: Connect your Epic MyChart records to PatientPower · Is it safe to connect third-party apps to MyChart? · How to download your MyChart records.

Common questions

What data can an app get from MyChart?

Epic's MyChart help says apps can request only data in the United States Core Data for Interoperability (USCDI), a federal standard set maintained by ASTP/ONC. What arrives also depends on what your health system releases and what you approve. USCDI includes classes such as allergies, medications, problems, lab results, vital signs, immunizations, visits and clinical notes.

What does PatientPower import from MyChart?

Basic patient details (name, sex and date of birth), conditions, medications, lab results, vital signs, immunizations and visits. Allergies do not currently come through, so add them by hand. It does not import clinical notes, procedures, imaging reports, care plans or insurance details through the Epic connection.

Do my doctor's notes come across?

Clinical notes are a USCDI data class, so some apps can request them. PatientPower does not import clinical notes from MyChart. You can still read and download your notes in MyChart.

How often does a connected app update?

It depends on the access period you choose (Epic's MyChart help gives examples such as one hour, one day or one year) and on the app. Today each PatientPower connection is a one-time import; Sync now reads again only while your MyChart sign-in is still valid, then asks you to sign in again.

Why is some of my information missing in the app?

The app may not request that data class, your health system may not release it to apps, you may have cleared it on the sharing screen, or it may be outside USCDI, such as messages or billing records. Federal information-blocking rules also allow some information to be withheld under specific exceptions.

How do I revoke an app's access to MyChart?

In MyChart, go to Linked Apps and Devices, find the app and select Stop sharing. In PatientPower, select Disconnect on the Connect MyChart page. The app may keep what it already received, so ask it to delete your data; PatientPower lets you request deletion of your account and information at any time.

Which law is behind patient-access apps?

The 21st Century Cures Act. ONC's Cures Act Final Rule (2020) adopted a standardized patient-access API certification criterion (45 CFR 170.315(g)(10)) and implements the Act's information-blocking provisions (45 CFR Part 171).

Sources