Patient-controlled health records AI
CareClinic Health Tracker + connected AI assistant
CareClinic can supply authorized records to a separately governed AI assistant. Scoped access, confirmation before supported writes and revocation may expand agency; host interpretation and retained copies remain outside those controls. Unscored.
Hugo Campos authorized publication of this AI-assisted draft. No comprehensive human verification or hands-on product testing.
Summary judgment · Unscored in current comparisons
CareClinic MCP plus a selected AI host; no universal score across host configurations.
Potentially agency-expanding
Documented access and write controls support patient choice. Agency still depends on the host, actual enforcement and whether interpretations can be challenged.
Patient agency
How this tool changes agency
Could support patient-selected questions about records and deliberate authorship of supported check-ins.
Revocation cannot retract information already copied by the host; host behavior and downstream correction are untested.
Patient agency assessment
Who sets and changes the goal?
Users authorize a host connection and choose questions; authority over the host interpretation was not tested.
Can patients tell AI is involved?
The connector workflow explicitly involves an AI assistant chosen by the user.
Can patients meaningfully choose?
Scoped authorization and revocation are described. Revocation stops future access, not host-held copies.
Can patients correct or challenge the output?
Supported symptom/mood check-ins use preview and confirmation; medication writes are disabled. These controls do not verify correction of AI conclusions.
Does it help patients understand or act?
Authorized record context may support chosen questions and patterns; causal or treatment conclusions are not established.
Can patients evaluate the conditions of use?
Documentation distinguishes connector and host responsibilities; users must assess both policies and actual granted scope.
Text findings
What happens to patient data?
Two governance layers
CareClinic describes minimized connector returns and separate host terms. Account-linked MCP usage events have no automatic expiry; deletion reconciliation is distinct from revocation. Built-in AI training commitments do not govern an independent host. [S3]
Who is left out or burdened?
Host-dependent
A CareClinic account is required; Premium is not required to connect. Premium adds deterministic trend detail. Host costs and accessible connector support vary. [S2]
Are the clinical boundaries clear?
Documented; behavior untested
MCP help describes consumer informational use, excluding diagnosis and HIPAA covered-entity/clinical use. Broad security language does not override this scope. [S2, S4, S5]
Who defined what good looks like?
Tracker evidence is not AI validation
The cited Skeens study evaluates marketplace apps using MARS. It does not establish clinical benefit or validate MCP-mediated AI interpretation. Patient influence on AI outcome selection is not established. [S6, S7]
Review provenance
Criteria
CAIHL-derived HugoScore framework and current qualitative review method
Reviewer
AI-assisted public-source review prepared in OpenAI Codex
AI / model
OpenAI Codex / GPT-6 (exact variant not recorded)
Human review
Hugo Campos authorized review and publication. No comprehensive human verification is claimed.
Review date
2026-09-28
Limitations
Public-source documentary review only. No account creation, health-data upload, interaction tests, security audit, clinical evaluation or vendor interview. Host-specific and provider-specific behavior is unverified.
Review method
CAIHL public-source documentary review; current functionality separated from roadmap and adjacent offerings. No authenticated testing.
AI-assisted draft · Medium for connector documentation, low for host behavior and outcomes (AI-assisted draft)