Non paywalled: https://calmatters.org/economy/technology/2026/10/mychart-he...

Reading the article: it's not so much Epic's MyChart or CareEverywhere but a broken system which makes it hard or impossible to opt-out of institutional defaults. The moment health records are shared via CareEverywhere or IHEs all receivers have a copy under their jurisdiction and it turns into an interaction from 1 to N if you want to opt out.

The data also does not belong to the patient; it belongs to the hospitals and clinics to use for whatever they deem valid business purposes (mostly in good faith, but there are always exceptions and no one looking, no one enforcing).