Let's clear things up.

OurPrisma brings your medical records together from every provider you have seen, alongside anything else you choose to add, and puts it all on one timeline written in plain language.

From there you can read summaries of your own health, see how your experience compares to others in your community, ask AskPrisma questions about your own information, and find resources relevant to your conditions and interests.

See the step-by-step guide to getting started.

OurPrisma runs on iPhone and iPad (iOS), on Android phones and tablets, and in any web browser at app.ourprisma.com. Your data stays in sync across all of them.

You can still use OurPrisma. Our partnerships shape which communities we build alongside, but they are not a requirement for you to bring your records together and get clear answers about your own health.

Some foundations add features built for their community. Either way, whether you join through a foundation or on your own, the tools that help you find clarity in your own health journey are always yours.

And tell us who you would like to see. Email hello@ourprisma.com with the organization or foundation you are part of — hearing from patients is how we decide where to go next.

No. OurPrisma is not a substitute for medical advice, diagnosis, or treatment from a qualified clinician. If you are experiencing a medical emergency, call 911.

HIPAA is the federal law that sets national standards for protecting health information and gives you rights over your own records.

OurPrisma is built around HIPAA. We apply administrative, technical, and physical safeguards consistent with the HIPAA Security Rule, sign Business Associate Agreements with vendors that handle protected health information, and honor your HIPAA rights. Learn more in our Privacy Policy.

Nothing! OurPrisma is free for individual patients and their families, and it will stay that way.

Understanding your own health should not depend on what you can afford.

Our work is funded through our partnerships with patient advocacy organizations, foundations, and research programs, not by charging you or by selling your data. If your care team or program gave you a link, any costs are covered by them.

The form you sign when you join is a consent reviewed and approved by an Institutional Review Board (IRB) — an independent committee of healthcare professionals, medical researchers, medical ethicists, and community members whose job is to protect the people a platform like ours serves. Nothing about how we collect, protect, or use your information goes into effect without passing that review, and we hold ourselves to protections beyond what the law requires.

Related to it, but separate, is your HIPAA authorization: your legal permission for us to request your records from your providers and health plans. Without it they are not allowed to release anything to us, and there would be nothing for OurPrisma to bring together for you.

Neither of these enrolls you in research. Research participation is always voluntary and always a separate, explicit consent, asked for only if and when you choose to join a specific study. You can use everything OurPrisma offers without ever giving it, and if you do give it, you can withdraw at any time.

This is the same for everyone. Whether you join through a foundation or on your own, the same review, the same protections, and the same choice apply.

Only you, and a caregiver if you choose one. Your identifiable records — your name, exact dates, anything that identifies you as you — stay inside your own private OurPrisma database. They are never shown to other patients, and they are never sent to our AI.

When OurPrisma shows you how you compare to people in your community, those comparisons run on data that has first been de-identified, so no individual can be picked out.

For the full detail, see our Privacy Policy.

Before any of your data is used to find patterns across patients or used to help AskPrisma answer your questions, it is stripped to the HIPAA Safe Harbor standard. In practice that means:

No. AskPrisma and all community insights run in a completely separate system from the one where your identifiable data lives.

Think of it as two boxes: one holds your identity and your records, the other holds only the de-identified version. AskPrisma can open the second box, never the first. That is how it can help you make sense of your history and the patterns around it without ever knowing who you are.

Your identifiable records live in a database dedicated to your care provider or program — they are not pooled into one shared database with other organizations. Only the de-identified data needed for AI and cohort patterns is sent onward, to a separate system that holds no identities.

You only ever see the group, never a person. When OurPrisma shows how you compare, it is showing you a pattern across many patients — what is typical, what is common, where you sit within the range.

And the group has to be big enough. If too few people match, we simply do not show the number, because a figure drawn from a handful of people could point back at one of them. You get the picture of your community without anyone in it being identifiable, including you.

Yes — both in transit and at rest. Everything moving between your device and OurPrisma travels over an encrypted connection (TLS/HTTPS), and your stored data is encrypted on our servers. See our Privacy Policy for the full list of safeguards.

No. We do not sell your identifiable health information, and we do not use cookies or tracking to build advertising profiles or share your activity with ad networks. Data is shared with research partners only with your separate, explicit consent. The full picture is in our Privacy Policy.

Your account is protected by your password plus optional extra layers you control: two-factor authentication with an authenticator app, and passkeys (sign in with your device's Face ID, Touch ID, or fingerprint instead of a password). New accounts also verify your email before they can be used.

You can turn on biometric unlock, which gates the app behind Face ID, Touch ID, or your Android biometric every time it's opened. Your sign-in tokens are stored in the device's secure keychain (the same hardware-backed vault the operating system uses), not in ordinary app storage — so they can't simply be read off the device.

Screens that show health information block screenshots and screen recording, and they're hidden with a blur in the app-switcher preview — so a glance at your recent apps, or a screenshot, won't expose your records.

Yes. All traffic is encrypted with TLS, and the mobile app uses certificate pinning — it checks that it's talking to the real OurPrisma servers and refuses connections that have been tampered with. That defends against interception on untrusted networks like café or airport Wi-Fi.

The web app talks to the same protected backend over encrypted HTTPS, with the same account protections (password, two-factor, passkeys) and the same de-identification boundary for AI and analytics. Some hardware-specific features — like biometric unlock and screenshot blocking — are mobile-only because they depend on the phone's operating system.

No. Research participation is strictly opt-in. You can use OurPrisma entirely for yourself and share nothing with studies — and if you do opt in, you can change your mind at any time from your account settings, without losing access to any core features.

Yes. You have the right to request a copy of the personal information we hold about you. Email privacy@ourprisma.com and we'll handle your request — see Your Rights Over Your Data for details.

Yes — at any time. Follow the steps on the account deletion page. Once your request is verified, we permanently delete your account and associated personal health data. This action cannot be undone but we will always welcome you to sign up again if you wish.

If you spot something that looks wrong — unauthorized access to your account, or a suspected vulnerability in OurPrisma — email security@ourprisma.com. We take every report seriously.