All medical records are encrypted both in transit from the EHR to the user's device and also while at rest on the device. Only the patient has the key needed to decrypt the files, ensuring the patient has complete control over their information. Neither Coral Health or anyone else has the ability to access this patient data without the patient's permission.

This means that risk is isolated to each patient and there's no centralized honeypot for a hacker to target as there with other solutions like Apple Health.