LAST UPDATED: SEPTEMBER 18, 2026
St. Luke’s MyChart internet-based patient portal and mobile application (“MyChart”) is St. Luke’s’ licensed version of MyChart developed by Epic Systems Corporation (“Epic”). This St. Luke’s MyChart Privacy Policy applies to Personal Information obtained through MyChart and governs the collection, use, and disclosure of Personal Information (as defined below) that St. Luke’s Health Network, Inc. and its subsidiaries and affiliated hospitals, facilities, physicians, providers, ancillary providers and companies (collectively, “St. Luke’s”, “we”, “us” or “our”) collects from you or about you through MyChart. “Personal Information” is information that can be used to identify, contact or locate you. Examples of Personal Information include your name, address, email address, telephone number and other information you provide.
By further downloading, using, creating an account, or registering through MyChart, you agree to this St. Luke’s MyChart Privacy Policy and consent to the collection and use of your Personal Information as described in this St. Luke’s MyChart Privacy Policy.
As our service provider, Epic processes patient information contained in your medical record, such as information contained in your electronic medical record at your doctor’s office. Such patient information may be viewable through MyChart and may be considered protected health information, as governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state law. Please refer to our HIPAA Notice of Privacy Practices available at https://www.slhn.org/corporate-policies/hipaa-notice-of-privacy-practices, which shall govern as to protected health information in the event of a conflict with this St. Luke’s MyChart Privacy Policy.
This St. Luke’s MyChart Privacy Policy is incorporated into and made a part of the St. Luke’s MyChart Portal & App Terms and Conditions available at https://www.slhn.org/corporate-policies/mychart-terms (“St. Luke’s MyChart Terms”). Please review the St. Luke’s MyChart Terms because they govern your use of MyChart and limit our liability to you. By using MyChart, you agree that we may treat your information in the ways we describe in this St. Luke’s MyChart Privacy Policy. If you do not agree with any term of this St. Luke’s MyChart Privacy Policy or the St. Luke’s MyChart Terms, you must refrain from accessing or using MyChart.
MyChart is developed in part and supported by Epic; please refer to Epic’s Mobile Application Privacy Policy for Patients for more detailed information about the limited ways Epic may interact with your information to make your use of MyChart possible.
- Information We Collect
Information You Submit
We, and our vendors, may obtain Personal Information that you provide to us directly, for example, data you submit when you complete forms, fill out questionnaires, schedule in-person or telehealth video call appointments, request prescription refills, add or change pharmacies, add personal notes, enroll in research studies, send messages to your care team, or make payments through MyChart. Personal Information we, and our vendors, collect may include your name, account credentials, user ID, email address, phone number, insurance coverage information (including insurance card photos), vaccine documentation, health-related information, and payment processing information.
If you submit the Personal Information of another person, you represent that you have obtained the authorization from that person to submit such Personal Information to us.
Information We Collect Through Your Use of MyChart
In addition to any Personal Information or other information that you choose to submit through MyChart, we collect certain information whenever you interact with MyChart. This type of usage information may include the device or browser you are using, your IP address, device ID, session ID, other unique identifier, geolocation, crash analytics, webpage load and response times, all of the areas within MyChart that you visit and actions or interactions (such as buttons clicked), and the time of the visit.
MyChart may be personalized based on various information we may have about you to provide you with more location-relevant content. We may use GPS (global positioning systems) software, geo-filtering, and other location-aware technologies to locate you, sometimes precisely, for purposes such as verifying your location, delivering or restricting content based on your location, allowing you to check in for in-person appointments, and displaying health care providers near you. The first time you try to use any features that use your location, we will ask for your consent within the app and will only access your location if you give consent. You do not have to provide consent if you do not want to allow MyChart to use your location. You may use your device settings to change your geolocation preferences. We do not store your location data in MyChart.
We may use vendors to perform analytics and feedback services in order to facilitate the maintenance of MyChart and understand the use of MyChart features in order to develop new features. The services these vendors provide to us are for the purposes of understanding how MyChart is used, whether it is working, and what features and functions could be improved. We or our vendors may collect Personal Information about your online activities over time and across different online services when you use MyChart. We engage each such vendor as a “business associate” pursuant to a written agreement as required by HIPAA. We do not share Personal Information with third parties for their own direct marketing purposes.
Our analytics activities may include use of cookies, pixel tags, and similar technologies. The cookies, pixel tags, and similar technologies we use in connection with MyChart fall within the following classifications:
- Strictly Necessary Technologies: These technologies are necessary for MyChart to function and cannot be switched off in our systems. They are configured to provide you only with services you have requested, such as setting your privacy preferences, logging in, or filling in forms.
- Performance Technologies: We use performance technologies to understand how MyChart is being used, how we can improve it, and to measure its performance. We collect data about how you interact with MyChart, including page load times, error rates, and feature usage, to improve performance and usability. This data helps us identify and fix technical issues, optimize page load speeds, and improve the overall user experience. We collect data that may include, without limitation, browser type, operating system, IP address, pages visited, time spent on pages, user ID, and session ID, to analyze website and application performance, support users having technical difficulties, and improve the overall user experience. This information helps us understand how users interact with our platform and identify areas for improvement.
- Functional Technologies: These technologies enable MyChart to provide enhanced functionality, testing, personalization, identity verification, and to offer feedback opportunities regarding the use of MyChart. They may be set by us or by third-party vendors whose services we have added to our pages. Examples include, but are not limited to, saving language and other settings, personalization of MyChart’s functionality based on your interactions and information, and being assigned into test and control groups to measure effectiveness of our changes for the purpose of deciding what has worked and what has not.
In connection with MyChart, we do not use “Targeting” technologies to build a profile of your interests and target relevant advertisements to you based on your browser and internet activity.
We also may combine certain information we collect through your use of MyChart with other information we obtain about you from other sources.
Depending on your browser or device configuration options, you may be able to refuse, disable, or delete these technologies by adjusting your web browser or device settings. Because each web browser and device is different, please consult the instructions provided by your web browser (typically in the “help” section). If you choose to refuse, disable, or delete these technologies, some MyChart features may no longer be available to you.
How We Use Your Information
We use your information for many purposes, such as to: (i) facilitate your health care services and provide various products or services to you, including by processing your payments; (ii) analyze trends and improve our products and services; (iii) provide support and respond to questions from MyChart users; (iv) improve MyChart, products, or services; (v) learn about users’ needs; (vi) contact users for research, surveys, feedback, and other informational and marketing purposes; (vii) track traffic patterns and MyChart usage; (viii) provide customer service; (ix) provide information that may be of interest to you; (x) address information security and/or privacy issues, network functioning, and troubleshooting; (xi) investigate claims and/or legal actions, violations of our policies and procedures, and compliance with relevant applicable laws and legal process; (xii) comply with applicable laws, regulations, or legal process as well as industry standards and our company policies; or (xiii) prevent, investigate, identify, or take any other action with regard to suspected or actual fraudulent or illegal activity, or any activity that violates our policies.
We will store your Personal Information for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information was collected, or as may be permitted under applicable law.
Sharing of Your Information
We are committed to maintaining your trust, and we want you to understand when and with whom we may share the information we collect.
- Electronic health records service provider. Personal Information submitted to MyChart, such as your communications with your health care providers, may be shared with our electronic health records service provider, Epic, and added to your medical record. Once part of your medical record, this Personal Information may be considered protected health information, as governed by HIPAA and applicable state law. For more information on such protected health information, please refer to our HIPAA Notice of Privacy Practices.
- Co-branded services. From time to time we may enter into arrangements with third parties to provide additional features on MyChart. These arrangements may include business partners, sponsors, and co-branded online services (referred to here as “co-branded services”). Any information, including Personal Information, that you provide on one of these co-branded services may be shared with these partners. By participating in activities or providing your information on these co-branded services, you consent to our providing your information to those partners. Separate privacy policies may apply to these partners’ uses of your Personal Information.
- Other authorized third-party vendors and service providers. We may share your Personal Information with third-party vendors and service providers that help us with specialized services, including billing, payment processing and collections, telemedicine services, customer service, feedback or survey invitations, email deployment, business analytics, performance monitoring, system maintenance, hosting, and data processing. These third-party vendors and service providers may not use your Personal Information for purposes other than those related to the services they are providing to us.
- Corporate affiliates and transactions. We may share your Personal Information with our affiliates. We may also share your Personal Information in the event we sell or transfer all or a portion of our business assets (e.g., further to a merger, reorganization, liquidation, or any other business transaction), including negotiations of such transactions.
- At your direction. We may share your Personal Information at your direction or in accordance with your preferences, such as those set in your account settings. You may adjust your sharing preferences through MyChart. Note that if you choose to provide access to your information to friends, family, or others through the proxy access feature, they may obtain access to all or a portion of the information you have access to yourself on MyChart. For more information on proxy access, please visit https://www.slhn.org/mychart.
- You may also choose to link your MyChart account to your patient portal account with another health care system.
- Legal purposes. Information, including Personal Information, may be shared: (i) as permitted by law; (ii) where we determine that disclosure of specific information is necessary to comply with the request of a law enforcement or regulatory agency or other legal process; or (iii) to enforce our policies, or to protect legal rights, property, or safety.
- Protected Health Information. We may transfer your protected health information as described in our HIPAA Notice of Privacy Practices and permitted under HIPAA.
- As disclosed to you at time of collection. We may share Personal Information for any other purposes disclosed to you at the time we collect the information.
Links and Features
MyChart may contain links to, or features facilitated by, other sites or online services, some of which St. Luke’s may control. This St. Luke’s MyChart Privacy Policy does not apply to other online services, even if they are controlled by us. Please note that other online services may have their own privacy policies. We are not responsible for the privacy practices, advertising, products, or content of online services that St. Luke’s does not control. We encourage you to be aware when you leave MyChart and to review the privacy policies of each and every website that collects Personal Information, as the privacy policy may differ from ours.
MyChart may need to interact with certain functions and features on your device to provide certain features in MyChart, such as accessing the camera for video visits and facial recognition. The first time you try to use any of these features, we will ask for your consent within the app and will only allow you to use the feature if you give consent. You do not have to provide consent if you do not want to allow MyChart to interact with such functions and features on your device as referenced above.
Minors
MyChart is not intended for or directed to children under 13 years old. If you are under 18 years old or otherwise have not attained the age of majority in your state of residence, but are at least 13 years old, you may use MyChart in accordance with this St. Luke’s MyChart Privacy Policy and the St. Luke’s MyChart Terms and Conditions available at: https://www.slhn.org/corporate-policies/mychart-terms
Parents or guardians of minor patients may request proxy access to the patient’s MyChart account. For more information on proxy access, please visit https://www.slhn.org/mychart.
User Preferences
You may log in to MyChart and update certain preferences or Personal Information details. You may also download and send records accessible through MyChart or change sharing preferences.
As discussed above, MyChart is developed in collaboration with Epic, a service provider that processes patient information contained in your medical record. Accordingly, there may be certain Personal Information that you may be able to view through MyChart, but you will not be able to update or delete this information through MyChart. This information is contained in your electronic medical record at your doctor’s office and may be protected health information. Please refer to our HIPAA Notice of Privacy Practices for more information.
If you elected to receive emails from us and prefer to no longer receive such emails, you may opt out at any time by using the unsubscribe link located at the bottom of the email.
Security
The security of Personal Information is important to us. We use reasonable safeguards aimed to protect against unauthorized use, disclosure, alteration or destruction of the Personal Information we collect and maintain. You should keep in mind, however, that no data transmitted over the Internet is 100% secure and any information disclosed online can potentially be collected and used by parties other than the intended recipient. As a result, while we strive to protect your information, we cannot guarantee or warrant the security of any information you transmit to or from MyChart.
International Visitors
MyChart is intended for use in the United States of America only. All matters relating to MyChart are governed by the laws of the Commonwealth of Pennsylvania in the United States of America. If you visit MyChart or contact us from outside of the United States of America, please be advised that (i) any information you provide to us or that we automatically collect will be transferred to the United States of America; and (ii) by using MyChart or submitting information, you explicitly authorize its transfer to and subsequent processing in the United States of America in accordance with this St. Luke’s MyChart Privacy Policy.
Changes to St. Luke’s MyChart Privacy Policy
We reserve the right to change or replace this St. Luke’s MyChart Privacy Policy at any time. Please check back from time to time to ensure that you are aware of any changes or updates to the St. Luke’s MyChart Privacy Policy. We will indicate the St. Luke’s MyChart Privacy Policy’s effective date at the top of this page. Your continued use of MyChart after changes have been posted indicates your consent to the amended terms of the St. Luke’s MyChart Privacy Policy. If we make material changes that would impact your use of MyChart, we will endeavor to notify you of the changes, such as by posting a notice directly on MyChart, by sending an email notification (if you have provided your email address to us), or by any other reasonable method.
Contacting Us
If you have any questions or comments about this St. Luke’s MyChart Privacy Policy, please contact us by phone at 1-866 STLUKES (785-8537), by mail at: 801 Ostrum Street, Bethlehem, PA 18015, or visit https://www.slhn.org/compliance/report-an-issue.