OpenAI announced the launch of Health in ChatGPT, a new feature enabling U.S. users to securely connect medical records and Apple Health data to receive personalized health insights through the chatbot. The feature represents OpenAI's most direct entry into healthcare to date, positioning ChatGPT as a tool for medical information synthesis and wellness tracking. However, OpenAI has disclosed limited technical information about how medical data is stored, encrypted, or retained—critical details for a feature handling some of the most sensitive personal information. The company stated the connections are 'secure,' but has not published a detailed privacy impact assessment or specified whether data is used to train OpenAI's models, a practice that would raise serious HIPAA compliance concerns.
The feature's rollout comes amid broader regulatory scrutiny of AI companies handling health data. The FDA, FTC, and state attorneys general have increasingly focused on how AI tools claiming medical functionality comply with existing healthcare privacy laws. OpenAI has not announced partnerships with major healthcare providers or disclosed whether the feature has undergone clinical validation or received guidance from medical ethicists. Early documentation suggests the tool is designed to help users understand their health data rather than provide diagnoses, positioning it as informational—a distinction that may affect regulatory obligations but remains ambiguous in practice.
Industry observers have raised concerns about liability and accuracy. If ChatGPT provides health guidance that harms users, questions about OpenAI's responsibility remain unresolved. The company has not clarified whether users accept liability waivers or how ChatGPT's known hallucination problems are mitigated in medical contexts. OpenAI's decision to launch initially to Apple Health users gives the feature credibility through association with Apple's privacy commitments, but the companies have not published a joint privacy framework. The feature's long-term success will likely depend on OpenAI publishing comprehensive documentation addressing encryption methods, data retention policies, and explicit HIPAA compliance statements.