It is a fair question: if my hospital already gives me MyChart, and my insurer has an app, why would I want a health record app of my own?
The short version is that they are different kinds of thing, and they are not really competing. A patient portal is a window into one health system’s records. That health system runs it and its clinicians fill it in. A personal health record app is your own copy of everything, from everywhere. You fill it in, and nobody sees it unless you decide they should. Most people are better off with both.
Below: what each one is, what US law now gives you, and where each falls short, with every claim about the law or about portals linked to its source.
Disclosure
I am a doctor, and I founded exora, which is a personal health record app. So I have a stake in one half of this comparison, and you should read it with that in mind.
What I have tried to do about that: describe patient portals fairly, including what they do better than any app can, and be specific about where a personal health record app, mine included, does not help. If you want a comparison of the apps themselves, I wrote one here.
The short answer
- A patient portal such as Epic’s MyChart is run by a health system for its own patients. It shows what that system holds about you, and lets you message your care team, book visits and pay bills. It is free, and you probably have several.
- A personal health record app is a private record you create and control. You fill it in by uploading documents or typing. Nobody can see it, including your doctor, unless you share it.
- The practical difference: a portal shows you what one health system knows about you. A personal health record shows you what you know about yourself, from every place you have been treated. Those are different problems, and the second is much less well served.
What a patient portal actually is
The US does not have a single national health record. Instead, each hospital system, clinic group and lab keeps its own electronic record, and most offer patients a portal into it. The best known is MyChart, made by Epic, which runs the electronic records at many US hospitals.
Portals are genuinely good. MyChart’s App Store listing describes reviewing “test results, medications, immunization history, and other health information”, reading “clinical notes your provider has recorded and shared with you”, the ability to “communicate with your care team”, and “view and pay your medical bills”. It also offers linked accounts, which Epic calls Happy Together: “MyChart accounts can be linked so you can see all your information in one view.”
The same listing is clear about the limit: what you can see and do “depends on which features your healthcare organization has enabled”. And linking only works where both organizations take part. Epic’s own help page notes that “depending on your healthcare provider’s version of Epic, Happy Together might not be available to you yet.”
So a portal shows what a health system has recorded and chosen to share, plus whatever connects to it. Paper records, practices on other systems, care from before a system went electronic, and care abroad usually sit outside it. That is not a flaw in any particular portal. It is what a portal is for.
What US law gives you
Here US law is unusually strong on the patient’s side, and it makes everything else easier.
Your results and notes, without the wait. The 21st Century Cures Act made “information blocking” illegal: practices by providers, health IT developers and health information networks that are likely to interfere with access to your electronic health information, unless an exception applies (ASTP/ONC overview). In practice this is why results now often reach your portal before your doctor has called you. Federal guidance says a provider policy that delays lab results “for any period of time” so the ordering clinician can review them first “would likely be considered an interference”, as would information not being available through the portal “for any period of time” (FAQ, updated September 12, 2025).
Two things soften that. You can ask your provider to hold your results until your doctor has reviewed them, and honoring that request “would likely not be an interference” (FAQ). And where a state law specifically requires a delay for certain results, following that law is not information blocking (FAQ).
If a result appears before anyone has explained it, that is the rule working as designed, not a sign that something is wrong.
The rules carry real penalties. Health IT developers and networks found to have blocked information face civil money penalties of up to $1 million per violation (OIG final rule, 2023), and providers face separate disincentives (HHS final rule, 2024). In September 2025 HHS announced a crackdown on information blocking, followed by a joint enforcement alert (both listed on the ASTP/ONC information blocking page). If you think you are being blocked, you can report it through ASTP/ONC’s portal.
Your whole file, not just the portal view. Under HIPAA’s right of access, any covered doctor, hospital, lab or health plan must give you a copy of your records, generally within 30 days, for a cost-based fee (45 CFR 164.524). This is the right that reaches the things a portal leaves out. I wrote a step-by-step guide to using it.
Your health plan’s records, through an app. Medicare Advantage plans, Medicaid and CHIP, and plans sold on the federal marketplace must offer a Patient Access API, so that you can see “claims and encounter information, including cost” and a defined subset of clinical information in a third-party app of your choice (CMS fact sheet). From January 1, 2027, those plans must add prior authorization information, excluding drugs (CMS fact sheet).
Newer national plumbing. TEFCA, a national “network of networks” that went live in December 2023, includes Individual Access Services, which lets you “electronically request and securely receive” your own records through an app you choose (ASTP/ONC). Separately, CMS has launched a voluntary Interoperability Framework, under which networks, health systems and apps pledged to share data more easily, including a “Kill the Clipboard” category aimed at paperwork. Both are real and still early. Neither yet means every record you have ever had is one tap away.
What a personal health record app is
A personal health record is a health record that belongs to the patient rather than to a provider or an insurer. Some apps connect to portals directly; others work from documents you upload.
What they share are the two properties that define the category. You fill it in, by uploading, connecting or typing. And you control access: by default nobody else can see any of it, including a doctor treating you, until you choose to share.
That cuts both ways. Nobody reading your private app in an emergency is a privacy feature and a safety limitation at the same time.
There is also a legal point most people miss. HIPAA protects the copy your provider keeps. HHS is explicit that once your information reaches an app you chose, and that app is not a covered entity or business associate, “the information is no longer subject to the protections of the HIPAA Rules” (HHS guidance). So before you upload years of records anywhere, ask three questions. Where does the data live, and under whose laws? Is it used to train AI or shared with anyone? And what happens to your record if you stop paying or the company shuts down? A good answer to the last one is export, and it should not be hard to find.
The six differences that actually matter
1. Who fills it in
A portal is fed by your health system, automatically. A personal health record is fed by you, which is more work, and also why it can contain things no single system ever had.
2. Who can see it
A portal sits on top of your provider’s own record, which the clinicians and staff caring for you use every day, and which may be shared with other organizations treating you. A personal health record: nobody, until you share it. Neither is simply better. They suit different purposes.
3. One system versus everything
This is the biggest practical gap in the US. A portal shows one health system, plus any accounts that link to it. If you have a primary care doctor in one network, a specialist in another and a hospital stay in a third, you have three partial records and three logins. A personal health record can hold all of them side by side, along with the paper ones.
4. How far back it goes
A portal generally holds what that system recorded electronically. The practice that closed, the clinic you saw in college, a year abroad and letters on paper usually are not there. A personal health record’s boundary is whatever you can lay hands on, and your HIPAA right of access helps you lay hands on more.
5. What you can do with it
A portal is built for your care with that system: results, messages, bookings, bills, and it is very good at that. The better personal health record apps let you search everything at once, trend a result over years across different labs, and share a specific subset with a specific person for a specific period.
6. What happens when you move
A portal belongs to the health system. If you move across the country or change insurance and stop seeing those providers, the records stay with them. You can still request copies under HIPAA, but the convenient view is theirs. A personal health record goes where you go. Ask any app about export before you need it.
Two of those differences, in practice
Differences 2 and 5, access and sharing, are the ones people feel. Three situations make them concrete.
You are at an urgent care clinic on vacation and they ask what you take
You can name the two you remember. The dose of the third, the one you started in March, and the antibiotic that gave you a rash in 2019, are gone.
To be fair, portals have an answer here. You can open MyChart and hold up the screen, and MyChart’s Share Everywhere feature can give a provider “temporary access to basic information in your chart”, which Epic suggests for travel (MyChart help). That works well when the information you need is in that one system. If your medications came from three different doctors in three networks, it shows one part of the list.
With a record of your own, you send a link to your medications and allergies and nothing else, set to expire in two days, which the clinic opens in a browser. When you get home, you revoke it.
A new specialist wants the relevant history, not your life story
You are happy for a cardiologist to see your medications, conditions and recent bloodwork, from every doctor who has treated you. You would rather they did not read everything else, which is a reasonable position.
Portals are built around organizations, not your whole history. A cardiologist inside your health system likely already sees that system’s record, without you choosing what. One outside it may be able to pull records through networks such as Epic’s Care Everywhere, which “lets your healthcare provider securely access and update your record” held by other organizations (MyChart help), but that covers the systems that connect, not the paper or the practice that closed.
A personal health record shares by category, to one person, with an expiry, revocable from one screen. Different granularity, for a different purpose.
You are unconscious in an emergency room
Here your own app should not be the plan. Nobody can open your phone and grant themselves access to a private app, and they should not be able to.
Here, provider-side record sharing is what helps you: the hospital can look up your record if you have been treated in that system, or request it from connected organizations. You do not have to do anything, and no personal health record can match that. A wallet card with your allergies and key conditions is also worth the five minutes.
So do you need both?
For most people, yes, and they are complementary rather than redundant.
Keep your portals for your care inside each system. They are free, they fill themselves in, and thanks to the Cures Act they now show you results and notes quickly. Turn on account linking where it is offered, and use them for messages, bookings and bills.
Keep your own record for everything else. The other systems. The years before portals. The specialist who mails letters. The question “when did this actually start”, which nobody can answer without reading twelve documents side by side.
The two failure modes are equally common: assuming one portal is complete, and assuming your doctors can see your app.
Where exora fits
exora is a personal health record app, so everything above about the category applies to it, including how it behaves in those three situations. What it adds is the reading. You upload documents, such as PDFs, photos and scans, and exora reads them for you, with a reading system built for medical records. It pulls out the clinical details and builds one searchable record with a timeline, so results from different labs land on the same trend line. Every fact links back to the exact page and text of the document it came from, so you can check it. You can share a chosen part of your record by link, with an expiry, and revoke it. Your health data is never used to train AI models. exora is free to start, with an optional membership.
Where it does not help, honestly:
- No connection to MyChart, any portal, TEFCA or any US API. You download your records from your portals and upload them. That works, and it is a manual step. If you want automatic portal syncing, the apps in this comparison that connect directly are a better fit.
- Your data is stored in Sydney, Australia. exora is an Australian company, your record is not hosted in the US, and using it does not create a HIPAA relationship with your providers. The security page explains how your data is protected.
- Your doctor cannot see it unless you share it. That is the category’s defining property, not a gap we can close.
- It cannot get documents you do not have. You have a legal right to your records from every provider who has treated you, and this guide explains how to ask, but the asking is yours to do.
- It can misread. The reading is automated, so check anything that matters against the original. That is why every fact links back to it.
- It is not medical advice. It organizes and presents your information. It does not diagnose and it does not tell you what to do.
A reasonable starting point
If you want one concrete sequence: log in to each portal you have and see what is actually there, which is probably more than you expect. Link accounts where your portal offers it. Download what each one holds. Then request the records that are not in any portal, using your HIPAA right of access, and start putting the whole thing together into a record of your own.
Your portals and your own record answer different questions. It is worth having both.
Claims about US law and programs are sourced to the Assistant Secretary for Technology Policy (ONC), HHS, CMS, the Federal Register and the Code of Federal Regulations, and claims about MyChart to Epic’s own pages and App Store listing, all linked inline and checked on November 9, 2026. Rules and products change; this page will be updated as they do. This article is general information about software and how these systems work, not medical or legal advice.
