Your patient rights

Signing in to your portal shows you the same clinical information your care team sees: your lab results, the biomarker values behind them, your Oral Health Score and how it has moved between tests, the PDF reports your provider has generated, and any X-rays your practice has uploaded.

You do not need to ask anyone's permission and you do not need a reason. If something you expect to see isn't there yet, it usually means the lab hasn't returned it or your provider hasn't generated the report. The help page walks through how results travel from the lab to your portal.

You can download your record yourself, at any time, without contacting us:

1. Sign in and open your patient portal.
2. Go to Privacy & Access.
3. Under Export My Records, choose Download my records (ZIP), or the JSON or FHIR R4 version if another system needs to read it.

The ZIP archive contains your report PDFs, your X-ray images, the original lab documents and a README that explains each file, together with a structured file of your profile, every lab result, every biomarker result with its reference range, your report history, and your provider relationships. The JSON and FHIR R4 versions carry the same structured data without the documents.

It is yours to keep, back up, or hand to another provider. If you need it in a different format for a specific recipient, email support@mydxhub.com and tell us who needs it and in what form.

When someone signed in to myDxHub opens your clinical records, we record it, and you can read that record yourself under Privacy & Access → Who Viewed My Records. That covers a lab result, a report, an X-ray, your biomarker history and a full export of your record, whether the person opening it is a provider on your care team, a myDxHub administrator, or you. Each entry shows who it was, their role, what they opened and when, by name whenever we can identify the account, and labelled plainly when we cannot. Repeat opens of the same record by the same person in the same hour are shown as one entry; different records always stay separate lines, because the log's job is to show exactly which records were opened.

Three limits, said here rather than left for you to find:

• Views through a link you shared are not in this list. Those are tracked separately under My Share Links, which records when a link was first opened but not who opened it. The recipient never signs in, so there is no identity to record.
• Screens that show your name rather than your clinical records are not itemised. Your practice's staff see your name and your test kits to manage your account, and myDxHub administrators have an internal directory listing your name, email, date of birth and practice. Neither of those puts a line in your log. Opening your actual results, reports or X-rays does.
• Logging starts when a record reaches myDxHub. Anything that happened inside your practice's own systems before that is part of their records, not ours.

Privacy & Access → Who Has Access lists every provider connected to your record and what each one can open today. Revoking takes effect immediately and closes the connection: nothing new is shared, nothing updates, and anything that provider never opened is withdrawn. You can restore access just as quickly — a revoke is never permanent and never deletes anything.

1. Sign in and open your patient portal.
2. Go to Privacy & Access and find the provider under Who Has Access.
3. Choose Revoke access, then confirm. The confirmation tells you exactly what that provider will and will not be able to see afterwards.

Three things a revoke does not do, so nothing here surprises you later:

• It does not take back what a provider already opened. A record they opened while they had access, they keep for a limited time — the same way they would if you had handed them a printout. No software can un-send what has already been seen, so we say that plainly instead of promising otherwise. Your access log shows exactly what they opened and when, so there is never a question about what that was.
• Your practice's staff can still see your name and your test kits, because that is what they need to manage your account and your orders. They cannot open your results, reports or imaging.
• myDxHub's own administrator accounts can open your records (your lab results, your reports and your X-rays) to support and protect your account. Revoking a provider does not touch that, and there is no setting that switches it off. What you get instead is sight of it: when an administrator opens one of those records, the entry appears in your access log under their name with an Admin label. The internal directory they use to find an account by name is the exception noted above. It is not itemised in your log.

If an owner's or an administrator's access concerns you, email support@mydxhub.com and we will go through your specific record with you.

You can hand a single report to someone outside myDxHub (a specialist, a physician, a family member) with a secure link you create from that report in your portal. A link stays live for 30 days from the moment you create it, and you can switch it off before then from Privacy & Access → My Share Links.

Revoking is immediate and final for that link: the address stops working for everyone who has it, and anyone who tries it sees only that the link is no longer available. Your report itself is untouched, and you can create a fresh link later.

Treat a share link like a key. Anyone holding it can open that report without signing in, which is what makes it useful and also what makes it worth revoking once the recipient has what they need.

If something in your record is wrong (a misspelled name, a wrong date of birth, a result you believe belongs to someone else), you can file the request yourself, in your own words, without contacting anyone first:

1. Sign in and open your patient portal.
2. Go to Privacy & Access.
3. Under Ask For A Correction, say what is wrong and what it should say instead.

Your request is recorded on your record exactly as you wrote it, and it stays there whatever the answer is. Whoever reviews it has to tell you what they decided, and if they decline they have to tell you why — that reason appears next to your request in your portal. A request you have filed cannot be taken back, for the same reason the decision cannot be quietly rewritten: both are the record of what was asked and what was done about it.

Your practice and its laboratory created your clinical record and are the only ones who can change a diagnostic value; myDxHub does not change results on its own. So it is worth telling your practice as well — and you can email support@mydxhub.com with your name, the date of the result and what looks wrong, and we will confirm what myDxHub is showing and make sure your practice has the request. If a correction is declined, you also have the right to have your disagreement recorded alongside the record. Tell us and we will help you route that.

To ask for deletion of your account or of specific information, email support@mydxhub.com from the address on your account and tell us what you want removed. We will confirm your identity before we act.

Be aware of the limit, because it is real: healthcare records are subject to retention laws and to your practice's own record-keeping obligations, so some clinical information cannot be deleted on request. We will tell you plainly which parts we can remove, which parts we must keep, and why. Security and access logs are kept regardless. They are what makes the access history above trustworthy.

You can also ask us to restrict how your information is used or shared. We will tell you whether we can honor a given restriction rather than accepting it and quietly not applying it.

If the portal doesn't work for you (a screen reader problem, a format you can't open, no reliable internet), email support@mydxhub.com and tell us what you need. We will find another way to get your information to you. Our accessibility statement describes what we have built so far and what we know is still rough.

If you think your health information has been mishandled here, email support@mydxhub.com with “Privacy” in the subject line. Tell us what happened and when; we will investigate and respond to you directly.

You can also raise it with your practice's privacy officer (as the provider of your care, they hold the primary obligation for your record), and you can file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints.

We will not retaliate against you for raising a concern or filing a complaint. Nothing about your access to your records changes because you did.

This is not your Notice of Privacy Practices. That notice comes from your practice, which is the covered entity responsible for your care; myDxHub operates as their business associate. Where their notice and this page describe the same right, their notice governs your care and this page tells you which buttons do it here.

This is also not medical advice. Your Oral Health Score, biomarker explanations and report summaries are information, not diagnosis. Talk to your provider about what they mean for you. If you have a medical emergency, call your local emergency number.

For how we collect, use and protect information generally, read the Privacy Policy.