Today, Citizen Health is available for children and adults living with a rare disorder, including genetic neurodevelopmental disorders, inherited cardiomyopathies and arrhythmias, and rare cancers. We will continue to expand support for additional conditions in the coming months.

When you have access to your health information, you have the power to seek additional treatment options, to find potential clinical trials, and to share your information for research. When it resides only with your medical providers, you are dependent on them to keep it (and most providers do not keep records for more than 10 years); you’re also dependent on them to send it where you need it to go. By law, health care providers are required to give you copies of your health records – but they are not always required to do this immediately (they can take up to 30 days or more in some cases), and in some cases they can charge you a fee to do so. Our team takes on the burden of record collection for you, helping you have your health information to help you be more informed and more prepared, and allow you to participate in research to help others.

When co-founder Nasha Fitter’s youngest daughter was diagnosed with the rare disease FOXG1 syndrome, Nasha quickly learned that despite access to great care there was little to no information about the disease or how to navigate it, and not a single therapy on the market. She launched a nonprofit organization to address this gap and quickly found that access to rich clinical information was the biggest gap in advancing research for a cure. 

In 2017, Farid co-founded a company, Ciitizen, where the goal was to build a platform that allowed cancer patients seamless access to their data. When Nasha joined the company in 2018 and helped evolve its focus into rare disease, it became clear that this unique approach could unlock key clinical data and build a patient community that could fundamentally shift care for patients with rare diseases while accelerating cures. 

In 2023, Nasha and Farid co-founded Citizen Health to fundamentally flip the system on its head: empowering patients to drive their care and research through their own health data and accelerate treatments for those who need it most.

Click “Log In” on the citizen.health website and log in with your username and password, or go to http://patient.apps.ciitizen.com and log in directly.

Yes, you have the option to upload health records that you have in your possession already. To upload your records after you have created your profile choose “get records” and then choose “have records to upload click here.”

All you need is an internet connection and an internet browser such as Firefox, Google Chrome, or Safari. You can then access your Citizen Health account using a desktop computer, a laptop, a tablet, or a phone.

When you sign up you will need a copy of your driver’s license (or official government-issued photo id), which is required to obtain records on your behalf from the providers you identify.

You have the right under the Health Insurance Portability and Accountability Act (HIPAA) to get copies of your child’s records, but you will need a copy of your driver’s license, and may need a copy of your child’s birth certificate, in order for us to show your child’s medical providers that we are seeking these records on your behalf as a parent of your child. If you are the child’s guardian, you may need to submit proof of guardianship.

You have the right under HIPAA to get copies of another person’s medical records if you are the “personal representative” of that individual. In the case of a living adult, a personal representative is someone who has the legal authority to make medical decisions for that adult (for example, a health care proxy or power of attorney). You likely will need to submit a copy of the paperwork that shows you have this authority. In the case of an adult who is deceased, you can obtain these records if you have been named in the patient’s will as the executor of the estate, or a court has appointed you the administrator of the estate – or some states will allow you to obtain records if you are a surviving spouse or other next of kin. Our onboarding process (or customer service) will direct you to the types of documents you might need to upload in this situation.

If you ever need to reset your password, simply click “Forgot Password?” on the login page located at patient.apps.ciitizen.com and we will email you a link to reset your password; for security reasons, this link expires in 24 hours. If you have trouble resetting your password or do not receive a link, you can also reach out to support@citizen.health.

The simplest way to receive your complete health records is to request that Citizen Health collect health records on your behalf directly from the healthcare providers you designate. Once your records are released by the provider, they are uploaded to your Citizen Health account. Subject to our policies and terms of use, only you have access to these records. No third parties have access to this information unless you consent to share it with them. Alternatively, you can upload your records into your account directly.

Citizen Health is the technology service that allows you to request access to copies of your historical health information and records through the “right of access” granted under the Health Insurance Portability and Accountability Act (also known as “HIPAA”), as well as the federal 21st Century Cures Act Information Blocking Rules. Citizen Health aggregates and standardizes your Health Records, transforms them into digital data, and analyzes the information to offer you opportunities to share your information (for example, with caregivers, with your medical professionals, to find treatment, or to power research).

The people who have access to your information are those that you share with specifically through your Citizen Health profile. In addition, select individuals who work for Citizen Health will have access to your health information on an as needed basis and only for purposes of maintaining your account, for improving our services, and for determining which opportunities may be of interest to you. We will not commercialize or share your information with any third parties without your explicit consent. Only those individuals working for Citizen Health who have a need to access your information will be granted permission to do so.

You share your health information by granting someone access to your Citizen Health profile through the “Care Team” or “Share” features. You can grant access to anyone you choose simply by providing an email address for the person with whom you want to share your information. You can designate how long that person should have access to your account and you may revoke access at any time. Citizen Health will also notify you of opportunities for you to share your health information – and you can decide, either in advance or at the time you receive notice of each opportunity, whether or not you want to share your information.

Citizen Health uses HIPAA-compliant cloud services to maintain your information. Additionally, we encrypt information locally and have stringent policies for staff regarding access to information aimed at ensuring your information is protected at all times. We train staff and contractors regularly on our company security policies and requirements. Although we take standard industry precautions to prevent breaches – we are also prepared if they happen. We are required by federal and state law to notify you (and in some cases, regulatory authorities) promptly if there has been a breach of your health information, and we act promptly to investigate breaches to determine the cause and do our best to ensure to mitigate and resolve. Subject to relevant laws and regulations, we never share your information with any third parties or access it for any other commercial purpose without your explicit consent.

You own the access to your information, so even if Citizen Health is sold, you maintain your right to close your Citizen Health account at any time (and you can either request that the information in your profile be securely destroyed, or you may download the data for your own use). Where possible, we will inform you in advance of a transfer of ownership so you can decide whether to continue your account with a new owner. Similarly, if Citizen Health ceases to exist, except where barred by law, we will provide you with advance notice and allow you to delete or transfer your account.

Citizen Health uses our patent pending machine learning (ML) engine to take the thousands of pages of documents found in a patient’s history and summarizes the most important elements in a patient’s disease. The elements in this summary are then matched with clinical terminology codes so that researchers can immediately make use of this information, such as in clinical trials or observational studies.

Citizen Health works with partners that have a vision aligned to advancing research on rare diseases. These partners include physicians, academic institutions, drug companies and independent research organizations that support them. We will never disclose your information for insurance, advertising, or to 3rd parties not related to research without your express consent.

By agreeing to share your health information for research, you can help drug companies and research physicians to better understand the experience of patients like you, which can help lead to new treatments in the future. If you agree to your information being shared for observational research, we will share a summary of your profile with our research partners, for research purposes only. The information about you that we share with researchers will not contain information like your name, date of birth, phone number, address or other information that can be easily used to identify you. In addition, we will contractually prohibit vetted partners from attempting to re-identify the information.

Should a patient’s information be included in a study, Citizen Health is committed to returning a portion of the value gained from this study with users to the extent permitted by law (for example, in the form of direct payment, services, discounts, donations, or other value) or to donate this value to an advocacy or research non-profit as directed by the patient.

HIPAA requires that providers send records to patients within 30 days of receiving the request except in a few select cases. Individual cases will vary on how quickly records will arrive. After a request is made, we follow-up and urge providers to get them to us as soon as possible. In rare cases, providers won’t send records in a timely fashion. After 60 days and multiple follow-up communications we will stop trying to collect these records and share next steps on how you can approach getting these records into your profile.

Citizen Health will ask for records going back to the date of your disease diagnosis. Health care providers do not have to keep your records indefinitely – and how long they are required to keep them varies by state law. In general, we have found it difficult to get records that are older than 10 years and, in some cases, providers may destroy them earlier than that.

The HIPAA right to copies of your records is YOUR right – so requests for your records need to come from you. We place your signature on a form letter we send to request your records. We only use your signature to sign records request letters, and these letters are ONLY sent to your medical providers.

Your medical requests are submitted to your medical providers by fax or by email – so the provider needs some way to prove identity, and that you authorized the request letters to be sent. A clear copy of your photo ID is a way to remotely show that you are making the request.

Your medical provider needs some assurance that it is you who authorized the request for records. They will look for a decent match between your signature and the signature on the ID in order to prove identity and make sure that the request for records is coming from you.

Many providers, as a matter of company policy, will contact a patient about a records request just to confirm that the patient submitted the request. If your provider contacts you to confirm that you want your records to be sent to Citizen Health, you should confirm that you want your records sent to Citizen Health, unless you have changed your mind. (After all, it is YOUR right to your records that Citizen Health is helping you to exercise—so it is not surprising that providers may want to make sure that you authorized the records request.) However, if the provider calls and wants to send your records directly to you instead of Citizen Health – or if they call to tell you they won’t honor the request, or if they send you a bill for the records, or push back in any way – please contact us at records@citizen.health so we can help successfully resolve this.

Your right under HIPAA is to ALL of your health records maintained by your healthcare provider, and the request to your provider states this clearly. We review your records when they come in to make sure they contain information that is customary for a patient with your health history – however, we cannot know for sure whether your provider has sent us all of the health record information that they have about you. Please check your records and let us know if you think something is missing.

On occasions, providers refuse to comply with the HIPAA right of access by refusing to send records or by charging too high a fee. This could happen for a variety of reasons, but we are seeing higher compliance. We escalate your requests to higher level officials at the provider in order to do all that we can to make sure your provider complies with HIPAA – but we don’t have the power to enforce the law against them. If we are unable to get one of your providers to comply with HIPAA after 60 days, we will cease following up on that record and let you know next steps on how you can pursue it with your provider directly. It’s possible in some cases that the records may need to be sent to you first – and then to us for population in your Citizen Health account; if that’s the case, we will provide you with assistance, including covering any costs involved in getting these records to you and then on to us. We can also advise you about how to file a complaint with federal regulators if you want to do that.

Citizen Health uses the HIPAA right for individuals to be able to get copies of their health information in order to populate your Citizen Health account. Because this is your right of access, and the requests are submitted on your behalf, occasionally a health care provider may send you a bill for your records. (HIPAA places limits on what fees can be charged to patients – and many providers give patients copies of their records for free; however, the law does permit a reasonable, cost-based fee to be charged.) Please promptly send the bill to records@citizen.health so we can make sure it is compliant with HIPAA and then Citizen Health will pay the bill on your behalf. Your Citizen Health profile is free for your use, and Citizen Health pays any HIPAA-compliant fees related to the release of your records from a provider.

Your HIPAA rights extend to all information in the health record except for notes from psychotherapy sessions that are kept separate from other health records (which is not all mental health information – just the notes of a psychotherapy provider during a psychotherapy session, frequently maintained separately from other health records). However, state laws often require additional consent before sensitive information like HIV test results, mental health or genetic information can be released, even to the patient. As a result, when you put in your health records requests as part of onboarding to Citizen Health, you will need to specify whether you are comfortable with having this sensitive information shared with Citizen Health. Once this information is in your profile, you have the right to decide whether or not to share any of your health record information with any third parties. If you have any questions, please reach out to privacy@citizen.health.

To check the status of a pending records request or request an update to your existing records, sign in to your Citizen Health profile, select the provider you would like to view to see the status, and then, if you’ve been to that provider recently, you can choose “Yes, update my records” to request a records update.

Citizen Health does not charge users and the service is free for all patients.

Citizen Health is free to patients. If you choose to consent to share your records for research, Citizen Health uses our patent-pending machine learning (ML) engine to translate the thousands of pages of your health records and creates a research-ready summary of your information. We call this the Citizen Health Research Summary. When you consent to allow researchers to access your summary, Citizen Health may receive a fee from that research organization. The Citizen Health Research Summary creates efficiency for researchers, reducing their cost and labor to make patient information research-ready. Citizen Health will only ever grant researchers access to summaries of Citizen Health users who have consented to share their information.