What is Pivot Wellness?
Pivot Wellness is a personal health data management and wellness coaching platform. It helps users organize their health information from multiple sources into a unified, searchable system. Users can import nutrition data, fitness tracking, bloodwork results, and clinical medical records to get a comprehensive view of their health.
The platform includes AI-powered chat for exploring your health data, scheduled monitoring workflows, and wellness coaching tools.
How the Epic Integration Works
Pivot Wellness connects to your Epic MyChart account using the SMART on FHIR standard, an industry-standard protocol for secure healthcare data exchange.
Pivot Wellness is registered across the Epic community, so you can link your records from any of hundreds of US health systems — 500 and growing — that run on Epic, not just a single hospital or network. You choose your own health system when you connect, and Pivot Wellness talks to that system's MyChart directly.
The three steps you will meet
You will see a warning that looks like the message below.
Your hospital shows this to every app that is not the hospital itself. It is categorical — not a judgement about Pivot Wellness.
- Lab results and diagnostic reports
- Vital signs (blood pressure, weight, heart rate, etc.)
- Active and historical medications
- Medical conditions and diagnoses
- Encounter and visit history
- Your MyChart password
- Anything you do not grant
- Records from a system you have not connected
You can stop syncing, or stop and delete what we hold, at any time from Clinical → Manage.
Data We Access
With your explicit permission, Pivot Wellness may read:
- Lab results and diagnostic reports
- Vital signs (blood pressure, weight, heart rate, etc.)
- Active and historical medications
- Medical conditions and diagnoses
- Allergies and intolerances
- Immunization records
- Encounter and visit history
- Clinical notes and documents
We have read-only access. Pivot Wellness cannot modify, delete, or write any data to your medical record.
Security and Privacy
- OAuth 2.0 with PKCE: We use the most secure form of authorization. Your credentials are never shared with us.
- Encrypted transport, private storage: All imported health data travels over TLS 1.3, and the OAuth tokens that reach your medical record are encrypted at rest with server-managed keys. The imported records themselves are stored on our own hardware, protected by access controls and audit logging rather than row-level encryption — see Security for exactly what is and is not encrypted.
- No data selling: We will never sell your health data to third parties.
- Revocable access: You can disconnect at any time from Pivot Wellness or directly from MyChart's "Manage Connected Apps" settings.
- Data deletion: You can request complete deletion of all imported medical data at any time.
Your Rights
Under the 21st Century Cures Act and the ONC Final Rule, you have the legal right to access your electronic health information through standardized APIs. Epic and your healthcare provider are required to support this access. Pivot Wellness helps you exercise this right in a secure, user-friendly way.
Not Medical Advice
Pivot Wellness is a health data management tool, not a medical device. Any AI-generated analyses or summaries are for informational purposes only and do not constitute medical advice, diagnosis, or treatment recommendations. Always consult your healthcare provider for medical decisions.
Technical Details
- FHIR Version: R4 (4.0.1)
- USCDI Version: v3
- Auth Protocol: SMART on FHIR (OAuth 2.0 + PKCE)
- Client Type: Confidential, with JWT client assertion
- Signing Algorithm: RS384
Contact
For questions about the Epic integration, please contact support@pivotwellness.com.