Your patient rights

When you sign in, you see the same clinical information your care team sees: your lab results, the individual values behind them, the reports your provider has prepared, and any images your practice has added.

You do not need anyone’s permission and you do not need a reason. If something you expect to see is not there yet, it usually means the laboratory has not returned it or your provider has not prepared the report. The help page explains how a result travels from the lab to your record.

You can download your record yourself, at any time, without contacting us:

1. Sign in to your record.
2. Go to Privacy & Access.
3. Under Download my records, choose Download my records. You get everything in one folder.

The folder holds your report PDFs, your images, the original lab documents, and a short note explaining each file, together with a plain list of your profile, every result and value with its normal range, your report history, and the providers connected to your care.

If another clinic or health system needs to load your record into their own software, choose the copy for other health systems instead. It carries the same results without the documents. Either way it is yours to keep, back up, or hand to another provider. If you need it in some other form for a particular recipient, email support@mydxhub.com and tell us who needs it and how.

When someone signed in to myDxHub opens your clinical records, it is written down, and you can read that list yourself under Privacy & Access → Access history. It covers a lab result, a report, an image, your trends, and a full download of your record, whether the person opening it is a provider on your care team, someone from myDxHub support, or you. Each entry shows who it was, their role, what they opened, and when. Where we can name the account we do; where we cannot, the entry says so. Several opens of the same record by the same person within an hour show as one entry; different records always stay separate lines.

Three things this list does not include:

• Views through a link you shared. Those appear under My share links, which records when a link was first opened but not who opened it. The person never signs in, so there is no name to record.
• Screens that show your name rather than your clinical records. Your practice’s staff see your name and your test kits to manage your account, and myDxHub support has an internal list of names, emails, dates of birth, and practices. Neither puts a line in your list. Opening your actual results, reports, or images does.
• Anything that happened before a record reached myDxHub. What went on inside your practice’s own systems is part of their records, not ours.

Privacy & Access → Who has access lists every provider connected to your record and what each one can open today. When you end a provider’s access, it ends right away: nothing new is shared, nothing updates, and anything they never opened is closed to them. You can restore it just as quickly. Ending access is never permanent and never deletes anything.

1. Sign in to your record.
2. Go to Privacy & Access and find the provider under Who has access.
3. Choose Stop access, then confirm. The confirmation tells you exactly what that provider will and will not be able to see afterwards.

Three things ending access does not change:

• What a provider already opened. A record they opened while they had access, they keep for a limited time, the same way they would if you had handed them a printout. Your access history shows exactly what that was and when.
• What your practice’s staff can see: your name and your test kits, because that is what they need to manage your account. They cannot open your results, reports, or images.
• What myDxHub support can see. Our own support staff can open your records when they need to help with or protect your account. Ending a provider’s access does not change that, and it cannot be switched off. What you do get is a record of it: every time support opens one of your records, it appears in your access history under their name with the label Admin. The internal list they use to find an account by name is the exception noted above; it does not appear in your history.

If a practice owner’s or a support person’s access concerns you, email support@mydxhub.com and we will go through your record with you.

You can hand a single report to someone outside myDxHub, such as a specialist, a physician, or a family member, with a secure link you create from that report in your record. A link stays live for 30 days from the moment you create it, and you can turn it off before then from Privacy & Access → Share my records.

Turning a link off is immediate and final for that link: the address stops working for everyone who has it, and anyone who tries it sees only that the link is no longer available. Your report itself is untouched, and you can create a fresh link later.

Treat a share link like a key. Anyone holding it can open that report without signing in, which is what makes it useful and also why it is worth turning off once the recipient has what they need.

If something in your record is wrong, such as a misspelled name, a wrong date of birth, or a result you believe belongs to someone else, you can file a request yourself, in your own words, without contacting anyone first:

1. Sign in to your record.
2. Go to Privacy & Access.
3. Under Ask for a correction, say what is wrong and what it should say instead.

Your request is kept on your record exactly as you wrote it, whatever the answer turns out to be. Whoever reviews it has to tell you what they decided, and if they decline they have to tell you why. That reason appears next to your request. A request cannot be withdrawn once filed, for the same reason a decision cannot be quietly rewritten: both are the record of what was asked and what was done.

Your practice and its laboratory created your clinical record and are the only ones who can change a diagnostic value. myDxHub does not change results. So it is worth telling your practice as well. You can also email support@mydxhub.com with your name, the date of the result, and what looks wrong, and we will confirm what myDxHub is showing and make sure your practice has your request. If a correction is declined, you have the right to have your disagreement recorded alongside the record. Tell us and we will help you do that.

You can close your account yourself, in Settings on the website or the Account tab in the app; your records are removed 30 days later, and you can change your mind until then. How to delete your account has the steps and the full list of what is removed and what is kept. To have specific information deleted without closing your account, or if you cannot sign in, email support@mydxhub.com from the address on your account and tell us what you want removed. We will confirm your identity before we act.

Two things to know. Your practice keeps its own copy of the records it created, because the law requires that of them; that copy is theirs, and a request about it goes to them. And your access history is kept regardless, because health privacy rules require us to be able to account for who looked at your records; it is also what makes the list above trustworthy.

You can also ask us to restrict how your information is used or shared. We will tell you whether we can honor a restriction before we agree to it.

If the website does not work for you, because of a screen reader problem, a format you cannot open, or no reliable internet, email support@mydxhub.com and tell us what you need. We will find another way to get your information to you. Our accessibility statement says what works today and what we know does not yet.

If you think your health information has been mishandled here, email support@mydxhub.com with “Privacy” in the subject line. Tell us what happened and when. We will look into it and reply to you directly.

You can also raise it with your practice’s privacy officer, since as the provider of your care they hold the primary responsibility for your record, and you can file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints.

We will never treat you differently for raising a concern or filing a complaint. Nothing about your access to your records changes because you did.

This page is not a Notice of Privacy Practices. When a practice cares for you, that notice comes from the practice, which is responsible for your care under HIPAA; myDxHub works for them as their business associate. A record you hold on your own is covered by our privacy policy. Where their notice and this page describe the same right, their notice governs your care and this page tells you which controls do it here.

Your results, explanations, and report summaries are information for you and your provider to discuss. They are not a diagnosis and not medical advice. myDxHub is not for emergencies. If you think you have one, call 911 or your local emergency number.

For how we collect, use, and protect information generally, read the Privacy Policy.