Patient-controlled health records AI
VYTL
VYTL is a direct-to-patient records platform from VYTL Health LLC that gives each user a personal fax number, asks providers to fax records there, sorts incoming documents by type, date, and provider using automated and third-party AI systems, and lets the patient share their consolidated history with any doctor. Its patient-ownership framing and clean administrative boundaries are strongly aligned with patient agency, and the vendor states data is encrypted, never sold, and deletable within thirty days. The profile stays a low-to-medium draft because the AI subprocessors are unnamed, correction and export workflows are undocumented, pricing is hidden until signup, the company discloses no team or independent evidence, and the homepage HIPAA claim is broader than the qualified language in the company's own privacy policy.
Public-source research has been drafted, often with AI assistance. No comprehensive human review is recorded unless the profile provenance says so.
Summary judgment · 84% toward patient-directed
Potentially agency-expanding, mixed
Patient-initiated collection, patient custody, and patient-controlled sharing directly target the record-fragmentation problem CAIHL treats as an institutional failure. The posture stays mixed because custody runs through a vendor-hosted pipeline with unnamed third-party AI processors, an unqualified HIPAA marketing badge, no published security attestations, no visible team or history, and a liability cap at the greater of twelve months of fees or one hundred dollars.
Patient agency
How this tool changes agency
Consolidating scattered records and arriving at a new clinician with a complete history are direct, practical action supports. VYTL makes no interpretive or clinical claims, so its help is administrative by design.
Use is voluntary, a free tier exists, and accounts can be deleted at any time with thirty-day erasure. Prices are not public before signup, fees are non-refundable, and subscriptions renew automatically.
Patient-facing signals
Who does this AI serve?
Patients choose the service, initiate every record request, hold the consolidated record, and control sharing. Vendor subscription interests and unnamed AI and infrastructure processors remain in the control structure, and a clinic account type serves practices.
Can patients tell AI is involved?
The homepage says records are automatically sorted without mentioning AI. The AI role, including third-party AI services, and its accuracy limits are disclosed in the privacy policy and terms rather than in the product marketing.
Can patients meaningfully choose?
Use is voluntary, a free tier exists, and accounts can be deleted at any time with thirty-day erasure. Prices are not public before signup, fees are non-refundable, and subscriptions renew automatically.
Can patients correct or challenge what the AI produces?
The privacy policy grants access, correction, export, and deletion rights, and the terms make original documents authoritative over AI-extracted information. No public materials document how a user fixes a misclassified document, a wrong date or provider attribution, or an extraction error.
Does it help patients understand or act?
Consolidating scattered records and arriving at a new clinician with a complete history are direct, practical action supports. VYTL makes no interpretive or clinical claims, so its help is administrative by design.
Text findings
Who is left out or burdened?
Request burden stays with the patient; several groups unaddressed
Users must know their right of access and pursue each provider for records. The service is limited to adults 18 and older with no documented caregiver or proxy controls despite caregiver-centered testimonials. Accessibility conformance, language support, assistance programs, and pricing are not publicly disclosed.
What happens to patient data?
Strong headline commitments with a materially opaque middle
The privacy policy, effective June 2026, states no sale of personal information, encryption in transit and at rest, access controls, audit logging, deletion within thirty days, and access, correction, export, and deletion rights. Records are processed by automated tools and unnamed third-party AI services, with no disclosed subprocessors, retention terms, or model-training restrictions. Use of data to improve the service is undefined, and a business transfer could move records to an acquirer.
Are the clinical boundaries clear?
Clear
VYTL presents itself as an administrative records platform, disclaims medical advice, diagnosis, treatment, and any doctor-patient relationship, and instructs users to verify AI-extracted information against original documents, which remain authoritative.
Who defined what good looks like?
Vendor-defined; no visible external input
The patient-ownership framing aligns with patient-advocacy values, but no patient co-design, advisory input, independent evaluation, peer-reviewed evidence, security attestation, or named team was found. The company has essentially no public footprint beyond its own site.
Review provenance
Criteria
Same HugoScore CAIHL-derived criteria for every tool; public criteria are displayed from site/data/criteria.json, with fuller method notes in SCORING_FRAMEWORK.md.
Reviewer
AI-assisted public-source draft prepared in Claude (Cowork); no named human reviewer recorded.
AI / model
Claude Fable 5 (claude-fable-5).
Human review
No comprehensive human review has been completed or claimed for this draft profile.
Review date
2026-08-09
Limitations
No account creation, fax-ingestion test, authenticated workflow test, AI/OCR accuracy inspection, vendor or user interview, security audit, accessibility audit, independent validation, or legal/regulatory determination.
Review method
Public-source review of the VYTL homepage, signup surface, contact page, privacy policy, and terms of service, plus searches for press coverage, funding records, company registrations, app-store listings, and independent evaluations. No account creation, fax-ingestion test, authenticated workflow test, AI/OCR accuracy inspection, vendor interview, patient interview, security audit, accessibility audit, independent validation, or legal/regulatory determination.
Draft profile · Low-to-medium draft, official sources only