Privacy Notice for California Residents

Epic MyChart · agreement dated February 16, 2026 · Official agreement

Read the agreement

4 of 28 cards in Use & Processing

Use & Processing · Permission or license

Epic may use personal information to run, support, personalize and improve its sites and apps

Epic says it may use personal information for a list of purposes. These include: fulfilling the reason you provided the information (for example, if you share your name and contact information to apply for a job or ask about Epic's products or services, Epic will use it to respond to you); providing, supporting, personalizing and developing Epic Websites or Applications; creating, maintaining, customizing and securing your account on Epic websites that require a personal login; processing your requests, purchases, transactions and payments and preventing transactional fraud; providing support and responding to your inquiries, including investigating your concerns and monitoring and improving its responses; personalizing your experience and delivering content relevant to your interests; and testing, analysis and product development, including developing and improving Epic Websites or Applications. Epic adds that it will not use the information for materially different, unrelated or incompatible purposes without giving you notice.

Supporting quotations

We may use personal information for the following purposes:
To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to apply for a job or ask a question about our products or services, we will use that personal information to respond to you.
To provide, support, personalize, and develop Epic Websites or Applications.
To create, maintain, customize, and secure your account on any of our websites that require a personal login.
To process your requests, purchases, transactions, and payments and prevent transactional fraud.
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
To personalize your experience on Epic Websites or Applications and to deliver content relevant to your interests.
For testing, analysis, and product development, including to develop and improve our Epic Websites or Applications.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Qualifications & exceptions

  • Epic "may" use information for these purposes; the list does not say every purpose applies to every site or app.
  • Use for materially different, unrelated or incompatible purposes requires notice to you first.

Not stated here

  • The list includes processing purchases, transactions and payments, but the collection table marks commercial information as not received in the last 12 months; the notice does not explain the difference.
  • Which purposes apply to which Epic Website or Application is left to each one's own privacy policy, which is not supplied.

Cross-references

  • contrast (model-proposed): Commercial, biometric, geolocation and sensory data marked not received — contrast: Reviewed tension: the purposes list includes processing purchases, transactions and payments, while the collection table marks commercial information (records of products or services purchased) as not received in the last 12 months. The notice does not reconcile the two.

Use & Processing · Permission or license

Epic may also use personal information for security, legal demands and uses described at collection or in the CCPA

The same list lets Epic use personal information to help maintain the safety, security and integrity of its websites and applications, products and services, databases and other technology assets, and business; to respond to law enforcement requests and as required by applicable law, court order or governmental regulations; and as described to you when Epic collects your personal information or as otherwise set forth in the CCPA. The last item is open-ended: it points to whatever Epic tells you at collection and to the CCPA, neither of which is set out in this notice.

Supporting quotations

We may use personal information for the following purposes:
To help maintain the safety, security, and integrity of Epic Websites and Applications, products and services, databases and other technology assets, and business.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information or as otherwise set forth in the CCPA.

Qualifications & exceptions

  • These are uses Epic "may" make, from the same list as the service purposes.
  • The final item extends the list to uses described at collection or set forth in the CCPA.

Not stated here

  • The notice does not say whether responses to law enforcement requests are limited to those required by law.
  • What Epic tells you at the time of collection, and the uses the CCPA sets forth, are not supplied by this source.

Use & Processing · Company commitment

Epic says it will give notice before collecting new categories or using data for materially different purposes

Epic commits that it will not collect additional categories of personal information, or use the personal information it collected for materially different, unrelated or incompatible purposes, without providing you notice. For the specific ways your information may be used, the notice sends you to the privacy policy associated with the Epic Website or Application you use.

Supporting quotations

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Please review the privacy policy associated with the Epic Website or Application you use in order to review the specific ways in which your information may be used.

Qualifications & exceptions

  • The commitment is to give notice; the sentence does not mention asking for your consent.

Not stated here

  • The notice does not say how, where or how far in advance this notice would be given.
  • The privacy policies associated with each Epic Website or Application are not supplied by this source.

Cross-references

Use & Processing · Company commitment

Information you give in a request is used only to verify your identity or authority

Epic says it will only use personal information provided in a verifiable consumer request to verify the requester's identity or authority to make the request.

Supporting quotations

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Qualifications & exceptions

  • Limited to information supplied in a verifiable consumer request.

Not stated here

  • The notice does not say how long Epic keeps information supplied for verification.