FollowMyHealth

Is FollowMyHealth safe?

FollowMyHealth is safe enough to read results and message your doctor, but it is one of the weaker patient portals we have scored. We give it 63/100, below MyChart (74) and healow (69). The app itself has a good encryption design. The problems are a privacy policy that has not changed since 2019 and allows marketing use of your health data, store labels that disagree with each other, and two data breaches at its owner, Veradigm, in the past two years.

Does FollowMyHealth still work after the Veradigm changes?

Yes. Allscripts sold its hospital software business in 2022 and renamed what was left Veradigm, but FollowMyHealth stayed. Veradigm still lists it among its products in the annual report it filed in May 2026, which also describes staff cuts and office consolidation. The app keeps getting updates: version 2026.10.21 reached the App Store on 22 October 2026, and the Android app was updated two days earlier. Google Play shows more than 5 million downloads.

Whether you can log in depends on your provider. FollowMyHealth links to the records of the clinics and hospitals that use it, and a provider that switches systems will move you to another portal.

What the privacy labels and policy say

Apple's App Store label for FollowMyHealth says "Data Not Collected." That is hard to square with a health record app. Google Play's data safety section for the same app lists health info, name, email, address, phone number, sexual orientation (optional), messages, device IDs, crash logs and app interactions, the last three for analytics. Google Play also says no data is shared with third parties.

The privacy policy, last modified on 13 November 2019 and still written in the name of Allscripts, goes further than either label. It says Allscripts "may use your PHR Data for marketing and advertising purposes," including messages "on behalf of third party partners." It says Allscripts will not sell identifiable information without your consent, but "may provide or sell Aggregate Data or De-identified Data to third parties." It also allows cookies, flash cookies and web beacons on the service.

When a policy discloses clearly more than a store label, we score on the policy. A health record company that keeps the right to use your record data for marketing deserves a lower privacy score, even if it rarely uses it.

Veradigm's data breaches

Veradigm has reported two incidents. In the first, an attacker used a customer's credential to reach a storage account used for data migrations around 15 December 2024. It held other customers' patient data, including diagnoses, medications, test results and insurance details, according to the breach notice quoted by Paubox. Veradigm found it on 1 July 2025 and began notifying patients in September 2025, according to its filing with the California attorney general. In October 2025 it agreed to pay $10.5 million to settle a patient class action, and the court gave final approval on 26 March 2026, its annual report says.

In the second, Veradigm told the SEC on 8 September 2026 that someone used a vendor's stolen credentials to a Veradigm interface to download patients' personal data, in some cases including Social Security numbers, for "a small number" of customers. It says no clinical or medical data was involved. A ransomware group claims 3.5 million records; Veradigm has not confirmed a number. Neither notice names FollowMyHealth.

Separately, a federal judge in Illinois refused in July 2026 to dismiss a class action alleging that Veradigm passed patient portal visitors' health information to Google, Law360 reports. These are allegations, and the report does not say which portal was involved.

How the app protects your records

The policy describes stronger protection than many apps disclose. Data is encrypted in transit, and inside FollowMyHealth each person has a unique encryption key, with demographic and clinical data encrypted separately. Veradigm says it uses firewalls, audit trails, data loss prevention and regular penetration testing. You can sign in with a passcode or Touch ID on iPhone. We found no public bug bounty for Veradigm.

How to use FollowMyHealth safely

1. Set a mobile passcode or Touch ID login, and lock your phone.
2. Open the app or type your provider's portal address. Never sign in from an email link.
3. Review connected providers and authorised family members, and remove the ones you no longer use.
4. Opt out of marketing emails and texts in your account settings.
5. If you get a Veradigm breach letter, take the free credit monitoring and consider a credit freeze.

How we scored it

Regulatory record (85) and scams and harmful content (80) are the strongest factors: no regulator has fined FollowMyHealth, and there are no strangers on the app. Privacy (55) and transparency and control (55) are the weakest, because the 2019 policy allows marketing use of health record data and the App Store label understates it. Security (58) credits per-user encryption but reflects Veradigm's 2024 and 2026 breaches.