Microsoft Launches Copilot Health, a Dedicated AI Space for Medical Records and Wearables
Key Facts
- What: Microsoft announced Copilot Health, a separate, secure section within Copilot designed for health-related queries including analysis of lab results, medical records, and wearable device data.
- When: Announced on Thursday with a phased rollout; users can join a waitlist for early access.
- Data Sources: Connects to medical records from over 50,000 US hospitals and healthcare organizations via HealthEx, lab results through Function, and data from over 50 wearable devices including Apple, Oura, and Fitbit.
- Key Features: Helps users understand lab test results, search for in-network doctors using real-time US provider directories, displays wearable metrics like step count, and provides appointment reminders.
- Privacy Controls: Chats are isolated from general Copilot, data is not used to train AI models, users can delete health data or disconnect sources at any time; currently lacks HIPAA compliance for direct-to-consumer use.
Lead paragraph
Microsoft on Thursday launched Copilot Health, a dedicated “separate, secure space” inside its Copilot chatbot for users to ask questions about their personal medical records, lab results, and data from wearables. The new feature allows users to import records from more than 50,000 US hospitals and healthcare organizations and connect over 50 wearable devices, according to the company. Microsoft positions Copilot Health as a tool to help people better understand their health data — not as a replacement for professional medical advice — while emphasizing enhanced privacy controls and citations from credible health sources.
Body
The announcement, reported by The Verge, describes Copilot Health as a sandboxed environment that keeps health-related conversations isolated from the general Copilot experience. Users can upload or connect medical records through integrations with HealthEx and Function, enabling the AI to help decipher lab test results. The chatbot can also search real-time US provider directories to find doctors based on specialty, location, languages spoken, and accepted insurance plans.
Wearable integration forms a central part of the experience. Copilot Health supports devices from Apple, Oura, Fitbit, and more than 50 other manufacturers. The dedicated homepage can display current step counts, other tracked metrics, and reminders for upcoming medical appointments based on the data users choose to share. Users retain the ability to toggle off any data source or delete their health information at any time.
Microsoft says it has improved the quality and reliability of responses “by elevating information from credible health organizations across 50 countries.” Answers in Copilot Health will include citations with links to sources and “expert-written answer cards from Harvard Health,” the company stated in its press release.
In a briefing with The Verge, Dr. Dominic King, Microsoft’s VP of health at Microsoft AI, addressed the lack of HIPAA compliance for the consumer-facing product. “HIPAA is not required for a direct-consumer experience like this when you’re using your own data,” King said. He added that Microsoft considers it “incredibly important” to meet high standards and plans to announce updates regarding “HIPAA controls” in the future. The product currently holds ISO 42001 certification, an international standard for responsible AI use that Microsoft 365 Copilot products also possess.
Privacy and Competitive Landscape
Microsoft’s approach mirrors a growing trend among major AI companies. OpenAI launched a similar product called ChatGPT Health in January that also creates an isolated environment for medical conversations, encourages connecting medical records, and states that health chats are not used for model training. Amazon and Anthropic have likewise introduced healthcare-focused AI offerings, with some competitors achieving HIPAA compliance or describing their products as “HIPAA-ready.”
The absence of HIPAA compliance for Copilot Health has drawn attention. HIPAA establishes strict requirements for protecting electronic health information and imposes significant penalties on covered entities that violate its rules. Because Microsoft’s consumer Copilot Health is positioned as a direct-to-consumer service where users voluntarily share their own data, it is not legally required to follow HIPAA, according to King. However, experts have noted that AI companies can modify their privacy policies over time, raising questions about long-term data handling.
Microsoft stresses that Copilot Health chats remain under “additional access, privacy, and safety controls” and that health data is not used to train its underlying AI models. The company also provides users with straightforward controls to disconnect wearables or delete imported records.
Impact
For consumers, Copilot Health offers a potentially convenient way to make sense of complex medical documents and locate appropriate healthcare providers without needing to navigate multiple portals or phone calls. The ability to quickly understand lab results or view wearable trends alongside AI-generated explanations could help users become more informed participants in their own care.
Developers and health organizations may see opportunities to build on Microsoft’s integrations, although the lack of HIPAA compliance at launch limits immediate enterprise adoption in clinical settings. Hospitals and physicians remain bound by HIPAA, so any integration between Copilot Health and formal medical systems would require careful consideration of regulatory requirements.
The launch reflects Microsoft’s broader push into consumer health AI while competing directly with OpenAI, Google, Amazon, and Anthropic. By integrating deeply with both traditional medical records and popular consumer wearables, Microsoft aims to position Copilot as a daily health companion rather than simply a general-purpose chatbot.
What’s Next
Copilot Health is rolling out in phases, so initial availability will be limited. Interested users can join a waitlist to gain earlier access. Microsoft has indicated it will share additional updates regarding its “HIPAA controls” and compliance posture in the coming months, though no specific timeline was provided.
As more users connect sensitive health data, scrutiny of the product’s privacy safeguards, accuracy of medical interpretations, and potential for policy changes is likely to increase. Microsoft will need to balance its ambitions in consumer health with ongoing concerns about AI companies’ handling of medical information.
The company continues to expand Copilot’s capabilities across productivity, search, and now personal health, signaling a strategic bet that AI assistants can become central hubs for users’ most important data — provided they can earn and maintain trust around privacy and reliability.