A personal health record synchronization tool built on SMART on FHIR.
What it does
URE Health Sync is a patient-facing application that lets an individual retrieve their own medical records from healthcare providers that expose standards-based FHIR R4 APIs, as required by the 21st Century Cures Act. The user authenticates directly with their healthcare provider’s patient portal (for example, MyChart) and authorizes read-only access to their own record. The application then retrieves and stores that data locally for the user’s personal use.
Data accessed
URE Health Sync reads clinical data within the USCDI data set, including: demographics, encounters, conditions, medications, allergies, immunizations, laboratory and diagnostic results, vital signs, procedures, care team, care plans, clinical notes, and generated C-CDA documents.
Access is read-only. The application requests only patient-context read scopes (the patient/*.read scope class) and cannot write to or modify any medical record.
Authentication and authorization
Authorization uses the SMART App Launch framework (standalone patient launch) with OAuth 2.0 and PKCE. Access is granted solely by the patient logging in with their own provider portal credentials and explicitly consenting on the provider’s consent screen. The patient can revoke access at any time through their provider portal.
Data handling
- Retrieved data is stored locally, on infrastructure controlled by the user.
- No data is transmitted to third parties.
- No data is sold, shared, or used for advertising or analytics.
- The application operates on behalf of a single individual accessing their own records.
Support
Questions about URE Health Sync can be sent to s@ure.us. The application’s terms and conditions are published alongside this page.
URE Health Sync is an independent application and is not affiliated with or endorsed by Epic Systems Corporation or any healthcare provider. MyChart and Epic are trademarks of Epic Systems Corporation.