ChatGPT Health vs Apple Health: Who Gets Your Medical Data?

Neither ChatGPT Health nor Apple's Health app is a HIPAA-covered service. The real difference is custody. Apple's design keeps health data encrypted on your iPhone and, with two-factor authentication, unreadable by Apple in iCloud. ChatGPT Health copies the records you connect onto OpenAI's servers so its models can reason over them. OpenAI adds written promises, including no model training and no ad targeting, but it is still the party holding the data. As of September 2026, the question isn't which app is "HIPAA compliant." It's whose servers your lab results end up on, and what that company has promised in writing.

The timing makes the comparison urgent. On July 23, 2026, OpenAI opened Health in ChatGPT to every logged-in US adult on the Free, Go, Plus and Pro plans. About seven weeks later, on September 9, Apple previewed a redesigned Health app built around Apple Intelligence, with $119 Quest Diagnostics lab panels you can buy in the app. Apple's redesign ships "later this year," not today, so the choice this fall is whether to pipe Apple Health into ChatGPT now or wait for Apple's own AI layer. This article covers the technology and the terms, not medical advice.

What did OpenAI actually launch with ChatGPT Health?

OpenAI first introduced ChatGPT Health in January 2026 as a walled-off space inside ChatGPT, open to a small group of early users. OpenAI's original announcement said more than 230 million people globally ask health and wellness questions on ChatGPT every week, based on its de-identified analysis of conversations. It also said more than 260 physicians helped shape the product.

The July 23 update, which OpenAI calls Health in ChatGPT, changed two things. First, it put the feature in front of every eligible US adult on web and iOS, and OpenAI now puts the weekly figure at more than 300 million people asking health-related questions. Second, it removed the requirement to stay inside the Health space. OpenAI says that among early users with access, more than 70% of health-related conversations happened outside the dedicated experience. So ChatGPT can now draw on connected health information in any conversation, with your permission.

What you can connect, according to OpenAI's Help Center:

• Apple Health, on the iOS app only (it requires an iPhone), which also carries data that wearables such as Oura, WHOOP or Garmin write into Apple Health.
• Supported US provider portals, meaning medical records from US hospital systems. OpenAI's January post named b.well as the connectivity partner for these records.
• One Medical and Function Health.

The connection is read-only. OpenAI says ChatGPT cannot write back to Apple Health or change records held by your provider. Free users get GPT-5.5 Instant and paid users get GPT-5.6 Sol, which OpenAI calls its "strongest model yet for health." OpenAI's January announcement is explicit that Health "is not intended for diagnosis or treatment."

What is Apple adding to the Health app, and when?

Apple's September 9 announcement describes a Health app rebuilt around Apple Intelligence with iOS 27 and iPadOS 27. The pieces relevant to medical data:

• Insights tab: AI-generated summaries across heart, sleep, readiness, fitness, vitals and cycle tracking, plus a "For You" section of recommendations based on your data.
• Longevity tab and Health Age: an analysis of long-term data from iPhone, Apple Watch, AirPods, clinical health records and third-party apps. Health Age compares your metrics with your chronological age. Apple says users can add lab data such as A1c and LDL to enrich it, and that Health Age requires an Apple Watch.
• Labs: panels covering more than 50 biomarkers for $119, bookable in the app at about 2,000 Quest Diagnostics locations in the US.
• Movement assessments: at-home tests of flexibility, strength, balance and VO2 max using the iPhone camera and Apple Watch. Apple says "this experience runs entirely on device; no video is ever recorded, stored, or shared."

The caveat matters. Apple says the redesigned Health app "will be available later this year, starting in U.S. English, with more languages to follow." It will run only on Apple Intelligence-enabled iPhone and iPad models, some features are iPhone-only, and some require users to be 18 or older. The Quest Diagnostics release adds that the lab offering is "not available in all U.S. states." It also says Quest works with third-party providers who review and approve every test order and, at the user's request, discuss results at no extra charge. None of this can be used today. ChatGPT Health can.

Is ChatGPT Health or Apple Health covered by HIPAA?

No, not in the way most people assume. HIPAA is narrower than its reputation. The US Department of Health and Human Services explains that the HIPAA Rules apply to "covered entities" (health plans, health care clearinghouses, and health care providers that conduct standard transactions electronically) and to the business associates that handle protected health information on their behalf. A consumer app you download and connect yourself usually sits outside that perimeter.

OpenAI says this plainly. Its Help Center answers "Is Health HIPAA-eligible?" with: "Health in ChatGPT is not intended for clinical or covered-entity use and does not offer a Business Associate Agreement." It sends hospitals and insurers to separate products, ChatGPT for Healthcare and ChatGPT for Clinicians, which it says support HIPAA compliance.

Apple's Health app privacy disclosure brings up HIPAA in connection with sharing. When you choose to share Health data with a participating healthcare organization, that data "will be stored in a secure system in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security standards." That describes one sharing feature built to HIPAA standards. It doesn't turn the Health app itself into a covered service.

Here is the part that's easy to miss: the protection changes as the same data moves. Quest's HIPAA Notice of Privacy Practices says Quest "is required by law to maintain the privacy of your PHI," and lists test results as an example of PHI. So a Quest lab result starts out under HIPAA. Once it's in your Health app, Apple's own privacy terms govern it. Connect Apple Health to ChatGPT and the result is governed by OpenAI's Health Privacy Notice. The numbers are identical at every step. The legal regime isn't.

The gap is not a legal vacuum. HHS notes that the FTC Act bars companies from misleading consumers about what happens to their health information, and that the FTC's Health Breach Notification Rule covers vendors of personal health records that aren't covered by HIPAA. Under that rule a "breach of security" includes "an unauthorized disclosure by the company itself," not just a hack. The FTC's guidance on the rule lists civil penalties of up to $53,088 per violation. OpenAI's privacy notice also states that some of the data may count as "Consumer Health Data" under Washington's My Health My Data Act and Nevada's consumer health data law. Those are real obligations, but they aren't HIPAA.

How do the privacy terms compare side by side?

The table below uses only what each company says on its own pages, as of September 2026.

The training promise has a qualifier. OpenAI's product page and Help Center say connected data isn't used to train foundation models "regardless of the model-training setting you choose." The Health Privacy Notice frames it as "by default," and adds that "a limited number of authorized OpenAI personnel and trusted service providers might access data received via Health Features to improve model safety, unless you have opted out." That isn't a contradiction; safety review isn't the same as training. It does mean human access is possible unless you opt out.

Apple has not said where its health AI runs. Apple's announcement says the redesigned app "has been built to securely and privately protect a user's data at every step," and Sumbul Desai, Apple's vice president of Health and Fitness, described insights "built with privacy at the core." Apple specifies on-device processing for the movement assessments. It doesn't say whether the Insights and Longevity summaries run entirely on the iPhone or partly in Apple's cloud. Until the feature ships with documentation, that question is open.

Why does OpenAI's "Apple Health" connector matter so much?

This isn't a clean head-to-head, because Apple Health is one of the main things ChatGPT Health connects to. A few taps in ChatGPT's Health tab give OpenAI a readable copy of whichever categories you pick. Apple's disclosure puts the responsibility on you: third-party apps must have a privacy policy describing how they use health data, "so you should review these policies before providing apps with access." Once you grant access, Apple's encryption no longer covers that copy. OpenAI's terms do.

That's the real contest. Apple's pitch, if the redesign ships as described, is AI summaries of your health without that copy leaving Apple's stack. OpenAI's pitch is a more capable conversational model, available now, grounded in the same data and kept on OpenAI's servers. The same question of who holds the data applies to AI mental health chatbots, where users share sensitive details with a company rather than a clinician.

What are the risks beyond privacy?

Accuracy and liability are the other half of the story. According to TechCrunch and Gizmodo, the July rollout came a day after a Florida pastor sued OpenAI, alleging ChatGPT's health advice delayed treatment. Gizmodo also reported an earlier suit by the family of a 19-year-old. Both are allegations in litigation, not findings. OpenAI's own launch post says ChatGPT "can still make mistakes and does not replace the care and judgment of qualified medical professionals."

Apple's version carries a different kind of risk. Scores such as Health Age and Readiness turn many measurements into a single number, and a single number can feel more definitive than the data behind it. Apple says Readiness was developed using data from the Apple Heart and Movement Study, with exercise scientists and physicians, and that Health Age is "informed by the best available science." Apple also labels its Vitals app as "for wellness purposes only and not for medical use." The same tension between a consumer score and clinical meaning runs through at-home genomics and wearable ECG features.

What should you do right now?

• Treat "connect" as "copy." Connecting Apple Health or a patient portal to ChatGPT sends a copy to OpenAI. Disconnecting deletes the synced copy within 30 days, but anything already quoted in a conversation stays until you delete that conversation.
• Share categories, not everything. Apple's permission sheet lets you grant one data type at a time. Sharing sleep and workouts is a different decision from sharing clinical records or cycle data.
• Check two settings if you use ChatGPT Health. Keep the default "ask before using" permission under Settings > Plugins > Health, and review the opt-out, described in OpenAI's privacy notice, that stops staff and service providers from accessing Health data for model-safety work. Use Temporary Chat if you don't want memories created.
• Don't read "HIPAA" on a consumer app as a guarantee. HHS guidance on HIPAA and the FTC Act warns companies against misleading "HIPAA Compliant" or "HIPAA Certified" claims. Read the company's own privacy notice instead.

The strategic read: OpenAI is betting that usefulness now beats custody later, and at 300 million weekly health questioners it has the usage to test that bet. Apple is betting that its hardware and encryption story will matter more once its own AI arrives. For builders in digital health, whether they sell to consumers or to health systems, as ambient clinical AI vendors do, the lesson is the same: HIPAA follows the institution, not the data. The companies that win consumer trust are likely to be the ones whose privacy terms stay clear as data moves from lab to phone to model.

Frequently Asked Questions

Is ChatGPT Health HIPAA compliant?

No. OpenAI says Health in ChatGPT "is not intended for clinical or covered-entity use and does not offer a Business Associate Agreement." HIPAA mainly governs health plans, clearinghouses and healthcare providers, plus their business associates. OpenAI offers separate products, ChatGPT for Healthcare and ChatGPT for Clinicians, for organizations that need HIPAA support. Consumer health data in ChatGPT is governed by OpenAI's Health Privacy Notice and consumer protection laws instead.

Does OpenAI use my medical records to train its models?

OpenAI says connected medical records, Apple Health data and the conversations that use them are not used to train its foundation models or target ads, regardless of your model-training setting. Its Health Privacy Notice adds that a limited number of authorized staff and service providers might access Health data to improve model safety unless you opt out. Conversations that don't use connected data follow your normal ChatGPT settings.

When will Apple's AI-powered Health app and lab tests be available?

Apple says the redesigned Health app arrives "later this year," starting in US English, on Apple Intelligence-enabled iPhone and iPad models. The Quest lab panels cover more than 50 biomarkers for $119 at about 2,000 US Quest locations. Quest says they aren't available in every US state. As of September 2026, neither feature has shipped, and Apple hasn't given an exact date.

Should I connect Apple Health to ChatGPT?

That's a privacy judgment, not a medical one. Connecting gives ChatGPT context for questions about sleep, activity or lab trends, but it places a copy of that data with OpenAI. If you connect, share only the categories you need, keep the default "ask first" permission, and review OpenAI's opt-out for model-safety access. Neither product replaces a clinician. OpenAI says so directly, and Apple labels its Vitals app "for wellness purposes only and not for medical use."