Tai · Epic on FHIR

Patient health record connection

What this app does

Tai is a private, single-owner personal command center. This feature lets the owner connect to their own patient health record (AdventHealth / MyChart) and view it inside Tai. The connection is strictly read-only: Tai reads the patient's USCDI data and never writes to the medical record.

How it connects

Tai uses the SMART-on-FHIR standalone patient launch with OAuth 2.0 authorization-code grant and PKCE (S256). The patient authenticates on Epic's own login page; Tai never sees the MyChart credentials. Tokens are encrypted at rest with a server-only key and are never exposed to the browser.

Data classes requested (USCDI)

Patient · Condition · MedicationRequest · Observation (labs & vitals) · AllergyIntolerance · Immunization · DocumentReference · Procedure · Encounter.

OAuth scopes

openidfhirUseroffline_accesspatient/Patient.readpatient/Condition.readpatient/MedicationRequest.readpatient/Observation.readpatient/AllergyIntolerance.readpatient/Immunization.readpatient/DocumentReference.readpatient/Procedure.readpatient/Encounter.read

Privacy

The full privacy policy is at /privacy. In short: a single-owner app that reads the owner's own records, stores them securely, and never sells or shares them.