Most clinics now keep visit notes, imaging orders, medication lists, and test results in electronic health record software. Many also offer a patient portal, a website or phone app where you can read parts of that record and send messages to the office. The portal is part of your record, and it deserves the same care you would give a paper chart kept in a folder at home.

On October 26, 2026, STAT reported that the Trump administration "removed several security, privacy and transparency requirements" for vendors of EHR software. The original report has the details of what changed and who is affected. For a patient, the practical point is this: the rules that software makers follow are not the same thing as the habits you use at home. Your own login is still yours to protect.

Protect the login you already have

Use a password you do not reuse anywhere else. A password manager can generate and store a strong one, so you do not have to remember it. If the portal offers two-step verification, turn it on. Keep the email address tied to your account current, because password resets usually go there, and an old address can leave you locked out or, worse, give someone else a way in.

Log out on shared computers, and avoid saving your login on a library, work, or family device. If a relative or friend helps you keep track of appointments, ask the office how that person can be given access. Do not hand over your password. Many St. Louis metro patients see several clinics, so it helps to know which portal belongs to which office.

Read what the portal shows you

Portal entries can appear before anyone has explained them. A test result, an imaging note, or a medication change may show up while you are still waiting for a phone call. Write down the date you saw it and keep the wording exactly as it appeared. Then bring your question to the next visit or call the office. A line on a screen is not a conversation, and a single word can mean different things depending on the rest of the chart.

If something on the screen does not match what you remember being told, say so. Offices would rather hear about a mismatch early than find it later. Note the date of your call and the name of the person you spoke with, so the question stays easy to follow.

Send messages with a clear purpose

Portal messages work well for simple things: a question about a refill, a request for an appointment time, or a note that your symptoms have changed in a small way. Include your date of birth, the name of the provider you saw, and a short plain description. Keep the message to one topic so it is routed to the right person.

Do not use a message when you need a quick answer. If your symptoms are severe, sudden, or getting worse, do not wait for a reply. Call the office or seek care right away. Portal messages are not monitored around the clock, and a message sent at night may not be read until the next business day.

What your record can and cannot do

A record is a written list of what was documented. It does not capture everything that happened in the room, and it can contain errors or outdated medication lists. If you find something wrong, ask the office to correct it, and note the request and the date. Keeping your own short list of medications, allergies, and visit dates helps you catch gaps, no matter which software a clinic uses.

This article is for general information. It does not diagnose a condition, and it does not replace an in-person exam. If you are deciding whether to get examined this week, the portal can help you organize what you already know, but an examiner is the person who can sort out what your joints need.