The fuller story, whenever you want it.

A hospital has a whole department that turns raw records into the reports, scorecards and quality numbers its leaders rely on: managers, data engineers, analysts and report builders. A small clinic cannot afford that department, yet it has much of the same work to do.

MyCareFriend brings that support to smaller clinics through a team of digital assistants, each built for one job: an operations lead, a data analyst, a researcher, a finance lead, a systems and security lead, and later a patient companion. They all work from the same organized copy of your records.

Not yet. The operations lead and the data analyst run on tested rules: the record checks, the two quality measures and the late-update alerts are ordinary code, tested on sample data.

Language models will be added only where they help, starting with the researcher, and only under clear rules: numbers come from tested code, answers show their sources, a person approves anything that changes data, and no patient information goes to any tool without a Business Associate Agreement.

No, and it is not meant to. Hospitals pay whole departments to do this work. Most small clinics have never had that option, so the work lands on a nurse, an office manager or a physician after hours, or it does not get done.

MyCareFriend gives those teams access to the same kind of help, so the gap in care between large and small organizations can close.

Independent practices, rural health clinics, community health centers and small rural or community hospitals, especially those serving lower-income and rural communities.

Larger organizations usually have their own data staff. A six-provider practice or a small health center often has the same reports to produce, kept in a spreadsheet by whoever can find the time. That gap is the reason MyCareFriend exists.

We are getting ready for our first pilot practices. Today the operations lead and data analyst work on realistic sample data: records are read and organized, seven record checks are built and tested, two quality measures are worked out, a clinic dashboard shows the results, and late updates are flagged on their own.

The researcher, finance lead and systems and security lead are in development, and the patient companion comes later. Real patient records come only after a signed Business Associate Agreement (BAA) and hosting covered by it.

Many clinics still run on paper charts and spreadsheets. When a page goes missing, part of a patient's history goes with it, and every report built by hand takes time away from care. We started MyCareFriend so these clinics get the kind of data support hospitals take for granted.

A few questions by email, with nothing to install: what you report, how you produce it today, and who does the work. At many small practices the answer is one person and a spreadsheet, and that is useful to know before anything is connected.

You receive a written summary of what we found, whether or not you go ahead. If we think another approach would serve you better, we will say so. This takes about a week, and no data moves.

We sign a Business Associate Agreement (BAA) with you, the contract the HIPAA Privacy and Security Rules require before a vendor handles protected health information (PHI). We move to hosting covered by a BAA, with encryption at rest, and turn on multi-factor sign-in.

These are still ahead of us, and they come before any access to your records. An independent security assessment is a separate, later milestone. You are welcome to start with the first step now.

Access is granted by whoever manages your record system, not by us, and for most systems it cannot be arranged in advance. We write the request, tell you who it goes to and follow up on it. You sign it.

It can take a few weeks, sometimes longer, and that part sits with other organizations, so we cannot promise a date. We send you a written update each week on where the request stands, including weeks when nothing has moved.

If another company says it is already connected to your system, it is worth asking whether that connection is working at your practice today.

Your records are copied into one organized place, and nothing changes in your own system. The checks look for problems that would make a report wrong. The first run will probably turn up a few, such as dates that do not add up, fields never filled in, or the same visit entered twice. That is normal, and finding them before anything is counted is the purpose of the checks.

The first read takes a few days once access is in place. For now each read covers your full history, and quicker update-only reads are planned. Your first numbers follow in the same week.

Most of the effort is at the start, and there is not much of it: a few written answers, a signed BAA, one signature on a request we write for you, and the name of the person we should follow up with. After that, we send regular written updates to read whenever it suits you.

The one thing we cannot remove is the waiting for record access, because it sits with other organizations. We would rather you know that from the start.

No. Your record system stays the main source of truth. We only read from it and do not change anything in it.

Electronic health record (EHR) systems certified under the ONC Health IT Certification Program, the federal program that certifies them, must offer a standard way for a practice to let approved software read its records. That shared standard is what lets one product work with many record systems.

Today MyCareFriend reads records in that standard format from files. We do not list specific systems yet because we have not connected to a clinic's live system. Once we have, we will share which ones and what it took.

Clinical information: visits, conditions, medicines, test results and allergies. The access request asks only for the record types the work needs, in line with the HIPAA minimum necessary standard.

The standard connection covers clinical information. Getting billing, scheduling and finance data through a record system can mean a separate arrangement and a separate fee. So we plan to read them from the spreadsheets and documents you already keep, as the main path rather than a backup. That part is planned, and it is where the finance lead will do most of its work.

No. When the checks find a record that needs correcting, we list it for you, and you fix it in your own system. We tell you what we found rather than quietly changing anything behind the scenes.

Two to start with: HbA1c control (the share of patients whose most recent A1c is below 8), and patients returning to the hospital within 30 days. Each one is saved with how many patients were counted, the dates covered and how it was worked out.

Hospital returns can only be measured from hospital stay records, so that measure is for hospitals; a clinic without inpatient stays will not see a number for it. It counts returns to the same organization only. Returns to other hospitals do not appear in your own records, so the rate may look lower than the true one, especially for small and rural hospitals.

Seven checks are built and tested on sample data:

• Dates that do not add up, such as a visit that ends before it begins
• Finished hospital stays with no discharge date
• Values that could not belong to a real person
• Records pointing to visits that never arrived
• Placeholder names, such as Test Patient
• Conditions recorded without a code
• The same visit entered twice

They will run automatically on every update before our pilots begin.

A missing number with a clear reason is still useful, because it tells someone what to fix. Suppose a quarter of your hospital stays have no discharge date recorded. A readmission rate could still be worked out from the rest and look perfectly normal, while being wrong. Our aim is that a number like that is not shown.

Today the product holds a number back when there are no patients to count at all, and the screen explains why. Holding a number back when some records are incomplete, and listing those records so someone can fix them, is our next step.

Not yet. Agency reports need risk adjustment and exclusions that our measures do not include yet, so for now the numbers are for tracking and improving your own performance. Please keep your current process for official filing. Measures ready for agency reporting, such as UDS for health centers, MBQIP for critical access hospitals and electronic clinical quality measures (eCQMs), are planned.

Every five minutes, the operations lead checks when each feed last arrived against its own schedule. If one is late, it raises a flag with the time it was expected, and the flag clears by itself when the update arrives. Loading new records is still started by hand today.

Reviewed 17 October 2026.

No. We hold no protected health information (PHI). Everything in the product uses realistic sample data, and no real patient record will be loaded until the safeguards below are in place.

• Every page and form is served over HTTPS (TLS), and browsers are told to use HTTPS only.
• Passwords are stored only as one-way bcrypt hashes. Repeated wrong passwords lock the account for 15 minutes, and sign-in and account requests are rate limited.
• Role-based access control. Provider account requests are reviewed and approved by hand.
• Sessions expire, and a suspended account loses access at once.
• An audit trail records sign-ins, failed sign-ins to existing accounts and account changes, and the application cannot edit or delete it.
• Each organization's clinical records, check results and measures are kept separate by the database itself.

• A signed Business Associate Agreement (BAA) with each organization.
• Hosting covered by a BAA, with encryption at rest.
• Multi-factor sign-in for every account that can see PHI.

We also plan to request only the record types the work needs, in line with the HIPAA minimum necessary standard.

Staff at each clinic will see only their own organization's data. A platform administrator approves, suspends and removes accounts, and each of those actions is written to the audit trail. Today the product holds sample data only.

What you type into the chat assistant is not saved. When the chat passes a request to a person, that record is deleted after 90 days. Contact form messages and demo requests are kept until you ask us to delete them; a fixed schedule will be set in the formal privacy policy. For clinic records, retention and deletion terms will be written into each BAA.

There is no official HIPAA certification, so we do not claim one. We do not hold a SOC 2 report or a HITRUST certification yet. An independent security assessment is a later milestone, and we will name the assessor and the date when it is done.

Only de-identified data, under the HIPAA de-identification standard, and only with your written permission.

Only what you choose to type, plus standard server logs. The site loads nothing from other companies: no outside fonts, analytics or advertising trackers. The privacy notice has the details.

Early access to the assistants as they are ready, a real say in what we build next, written updates every week during setup, and a full copy of their data at any time.

MyCareFriend is a good match for clinics with reporting to do and little or no data staff. It may be worth waiting a little if you need real patient records loaded this quarter, if you are replacing a tool that already files your measures, or if your board needs an independent security report before looking at anything new. We will gladly stay in touch and let you know when those things change.

Not yet. Plans will be set with our first pilot practices, and we will share them then.

Not yet, as we are getting ready for our first pilot practices. Once a practice is happy to share its experience, we will list it here with its permission.

You get a full copy of your data, free and with no notice needed. Your own system is not affected.

Through the contact form. A real person reads every message and replies by email, so you have everything in writing.

Later. We are starting with clinics, and sign-ups for patients are not open yet. Send us a note and we will let you know when it is ready.

It is designed to show what your care team has recorded, such as test results, medicines, conditions and visit notes, in one place instead of several portals and a paper folder. It will carry messages from your practice with a way to reply, and remind you before prescriptions and appointments.

You will choose which reminders reach your phone. The default will be fewer alerts, not more, because an app that pings about everything gets muted, and then it cannot tell you the one thing that matters.

Only the people you choose. Being related to you will not give anyone access, and you will be able to withdraw access at any time.

No. We hold no real patient information today, and that will not change until your clinic has signed a Business Associate Agreement (BAA) with us and our hosting is covered by it. Your clinic remains responsible for your rights under HIPAA, such as access to your own records.