FHIR API Access
What should I know about fhir api access: get your health records electronically?
Learn how FHIR APIs let you access your health records through apps. Understand SMART on FHIR, patient access APIs, and how to connect to your healthcare provider.
Federal law now requires hospitals and clinics to give you electronic access to your records through apps. FHIR is the standard that makes it work. Here is how to use it.
What is FHIR?
FHIR (pronounced "fire") stands for Fast Healthcare Interoperability Resources. It is the modern standard for exchanging healthcare information electronically, developed by HL7.
Under the 21st Century Cures Act, certified EHR systems must provide patient access through FHIR APIs. This means you can use apps to pull your records directly from hospitals and clinics that run major EHR systems.
Standard Format
FHIR uses modern web formats (JSON, XML) that any app can understand
SMART Security
SMART on FHIR provides secure authorization — you control what apps can access
Real-Time Access
Get your records instantly rather than waiting for faxes or mail
What Data is Available
FHIR organizes health data into "Resources" — standardized chunks of information:
PatientDemographics, contact info, identifiersAllergyIntoleranceDrug allergies and substance reactionsConditionDiagnoses and health problemsMedicationRequestPrescriptions and medication ordersObservationLab results, vital signs, measurementsProcedureSurgeries and procedures performedImmunizationVaccine administration recordsDocumentReferenceClinical notes and documentsDiagnosticReportLab reports, imaging reportsEncounterHospital stays, office visitsUSCDI Requirement: All certified EHR systems must make the complete USCDI (US Core Data for Interoperability) available through FHIR APIs. This includes all the resources above and more.
How to Connect Your Records
1Choose a FHIR-Compatible App
Download an app that supports SMART on FHIR connections:
- •iPhone: Apple Health (built-in) or third-party apps
- •Android: CommonHealth or other FHIR apps
- •Web: Some providers and aggregators offer browser access
2Find Your Healthcare Provider
In the app, search for your healthcare provider:
- •Search by hospital or clinic name
- •Look for their specific patient portal (MyChart, FollowMyHealth, etc.)
- •Not all providers are available — check with your provider if not listed
3Log In and Authorize
You will be redirected to your provider's login:
- •Enter your patient portal username/password
- •Review what data the app is requesting
- •Click "Authorize" or "Allow" to grant access
- •You can revoke access later through your patient portal
4View Your Records
Once connected, your records will sync to the app:
- •Initial sync may take a few minutes
- •Connect multiple providers to aggregate records
- •Apps may refresh automatically or on-demand
FHIR-Compatible Apps
Apple Health
iOSAggregates health records from multiple providers
Features:
- ✓Connect to 500+ institutions
- ✓View medications, labs, immunizations
- ✓Share with doctors
CommonHealth
AndroidOpen-source personal health record app
Features:
- ✓SMART on FHIR support
- ✓Multiple provider connections
- ✓Data export
MyChart
iOS/AndroidEpic patient portal with FHIR access
Features:
- ✓Direct provider connection
- ✓Appointment scheduling
- ✓Messaging
PicnicHealth
Web/MobileFull medical record aggregation
Features:
- ✓Automated record collection
- ✓Timeline view
- ✓AI organization
For more options, see our Personal Health Record guide.
Security and Privacy
SMART on FHIR Security
SMART (Substitutable Medical Apps, Reusable Technologies) on FHIR provides:
- ✓OAuth 2.0 authentication — industry standard security
- ✓You log in through your provider's portal — apps never see your password
- ✓Access tokens expire — limited-time authorization
- ✓Granular permissions — you choose what data to share
Important Privacy Considerations
The connection is secure. But once your data lands in a third-party app, different rules apply:
- ⚠️Once data is in a third-party app, it may not be protected by HIPAA
- ⚠️Read the app's privacy policy before connecting
- ⚠️Some apps may share or sell de-identified data
- ⚠️Use reputable apps from trusted developers
Revoking App Access
You can disconnect apps at any time:
- •Log into your patient portal
- •Find "Connected Apps" or "Authorized Applications" in settings
- •Revoke access for any app you no longer want connected
- •Note: This doesn't delete data already in the app
Frequently Asked Questions
What is FHIR?
FHIR (Fast Healthcare Interoperability Resources) is a standard for exchanging healthcare information electronically. It uses modern web technologies and formats (JSON, XML) to enable apps to access and share health data. FHIR is now required for certified EHR systems.
How do I access my records through FHIR?
Use a FHIR-enabled app like Apple Health, CommonHealth, or other personal health record apps. When you connect the app to your healthcare provider, you will log in through your patient portal and authorize the app to access your data. The app then retrieves your records via the provider's FHIR API.
Is it safe to connect apps to my health records?
SMART on FHIR provides secure authorization — apps only get the access you grant. Once data is in a third-party app, it is governed by that app's privacy policy, not HIPAA. Read app permissions carefully and use reputable apps from trusted developers.
Related Guides
Need Records the Traditional Way?
We can get you complete paper or electronic copies from any provider.