HealthEx
HealthEx helps people safely share their health records with AI agents, apps, and trusted services. It gives individuals full control—managing identity, consent, transparency, and access. Built on federal standards, HealthEx makes health data sharing secure, simple, and user-directed. Our goal: to be the default consent and data API for anyone—person, org, or AI agent—acting on health data.
HealthEx helps people safely share their health records with AI agents, apps, and trusted services. It gives individuals full control—managing identity, consent, transparency, and access. Built on federal standards, HealthEx makes health data sharing secure, simple, and user-directed. Our goal: to be the default consent and data API for anyone—person, org, or AI agent—acting on health data.
Learn More
HealthEx is building infrastructure that empowers individuals to take control of their health data—enabling them to safely share their health records with consumer apps, AI agents, and any trusted third party. In a world where AI will increasingly guide care, support decision-making, and automate health-related tasks, people need a secure, transparent, and standards-aligned way to direct their own data to the services they trust.
Think of HealthEx as Apple Wallet for health data—a consumer-first platform that connects fragmented medical records to the tools and experiences people actually want to use. Just as Apple Wallet streamlined how individuals manage payments, IDs, and digital keys, HealthEx enables people to retrieve their health records and share them in real time—securely and with full control. We route clinical health records, patient-generated health data, and any other health-related data to AI tools, digital health apps, payers, PBMs, and other healthcare stakeholders.
Thanks to federal initiatives, access to health records is improving. But access alone is not enough. For health data to be truly useful, individuals must be able to:
- Initiate, or respond to, records access requests from trusted services individuals engage with, from within HealthEx’s consumer-facing solution
- Verify their identity securely
- Grant and revoke consent for health records access in a clear, auditable, and enforceable manner
- Understand how their data is used and by whom
- Route data in real time to the apps, agents, or services they trust
HealthEx solves this “last mile” of consumer-directed exchange. Our platform provides a consumer interface for health records requests, integrates with identity providers, supports FHIR-based record access , and provides standardized, transparent logs of consent and data use. With a consumer-friendly interface and developer-friendly APIs, we make it simple for people to manage their data and easy for platforms to integrate with it. Trust and transparency is built into every step.
Today, individuals use HealthEx to retrieve and share clinical data with digital health apps, AI agents, payers, PBMs, and care teams. We serve as both the infrastructure layer moving the data and the trust layer governing how it’s accessed—ensuring that data is only shared with explicit, patient-initiated authorization.
HealthEx's intent is to be the default consent and data API for healthcare: the infrastructure trusted by individuals, relied on by platforms, and integrated by organizations that need to move health data with safety and speed. By putting people in control of their health data, we unlock a future where information flows seamlessly—but always on the patient’s terms.
APIs HealthEx uses:
- CLEAR IAL2/AAL2 ID verification and authentication APIs
- TEFCA IAS - RLS for endpoint locations
- Network-brokered CCDA and Facilitated FHIR for data retrieval
App Gallery
Empowering Your Health Journey
Bridging Health Connections
Unify your health information across various networks, giving you control and clarity over your health journey.
Standards and Assurance
We prioritize transparency. The presence of the CARIN code of conduct symbol highlights an app's commitment to best industry practices for your health data protection.
Frequently Asked Questions
My Health Application is being managed by the CARIN Alliance, which is a multi-sector alliance led by distinguished risk-bearing providers, health plans, pharmaceutical companies, consumer platform companies, health IT companies, third-party applications, and consumer-advocates working collaboratively with other stakeholders in government to overcome barriers in advancing consumer-directed exchange across the U.S.
The CARIN Alliance manages only this website; the CARIN Alliance does not endorse, certify, or manage any of the applications listed on this site. You should make your own judgment as to the application that is best for you based on information provided by the application vendors.
The vision of the CARIN Alliance is to rapidly advance the ability for consumers and their authorized caregivers to easily get, use, and share their digital health information when, where, and how they want to achieve their goals. Specifically, we are promoting the ability for consumers and their authorized caregivers to gain digital access to their health information via non-proprietary application programming interfaces or APIs.
We envision a future where any consumer can choose any application to retrieve both their complete health record and their complete coverage information from any provider or health plan in the country in a secure manner while protecting their privacy and individual consent sharing preferences. This website helps to advance the ability for consumers to access an application of their choice based on their own individual data sharing preferences.
The CARIN Code of Conduct is a set of industry-leading best practices that the companies offering these applications have voluntarily adopted to protect and secure your health information. We strongly recommend that you read the application’s privacy policies and terms and conditions to ensure that you select an application that you feel would protect and secure your health data in a way that is consistent with your individual data sharing preferences.
We would strongly recommend you read the application’s privacy policies and terms and conditions to ensure you select an application that you feel would protect and secure your health data in a way that is consistent with your individual data sharing preferences.
These applications came from the CMS Blue Button 2.0 site, EHR application vendor websites, CARIN Alliance members, and other public sources. Right now, the only thing that the CARIN Alliance has done is list the websites. Our initial goal is to focus on transparency and making sure the individual selecting an application knows where to go to find an application. We are also trying to make each application’s privacy policies and terms of service more readily available to the individual. Over time, we want to provide more consumer-friendly ways to help individuals understand how these applications are using their data.
Developer? List
Your Health App!
Join our growing community of trusted health apps. Get visibility, connect with potential users, and be a part of the movement to prioritize patient-centered health care.
