Epic says it does not sell or license your information
Under the heading 'Epic's Commitments To You', Epic states that it does not sell or license your information. The sentence rules out sale and licensing; it does not by itself describe other kinds of disclosure.
Supporting quotations
Epic’s Commitments To You
We do not sell or license your information.
Qualifications & exceptions
The commitment covers selling and licensing; other ways of passing information on are not addressed by this sentence.
The sentence states no exceptions or conditions.
Not stated here
'Your information' is not defined here, so it is not clear from this sentence whether it also covers the technical and security data the policy later says Epic collects.
Sharing & Disclosure · Company practice
Connected health platforms: data goes to your healthcare organization and is not stored in the app
If a patient connects the mobile apps to Google Fit, Health Connect (by Google) or Apple Health, the health and fitness data is transmitted by the apps and saved in the patient's medical record at their healthcare organization. Epic says it does not store health and fitness data within the apps. Whatever information is needed for the patient to choose recipients of the data is kept encrypted in app-private storage, and it is deleted if the patient stops sharing or uninstalls the app.
Supporting quotations
When you connect our mobile apps to Google Fit, Health Connect (by Google), or Apple Health, your health and fitness data is securely transmitted by our mobile apps and saved in your medical record at your healthcare organization.
We do not store any health and fitness data within our mobile apps.
Any information required for you to select recipients of your data is encrypted and stored in app-private storage.
If you stop sharing your health and fitness data or uninstall our mobile app, the encrypted information is deleted from app-private storage.
Qualifications & exceptions
Applies when the patient connects the apps to one of the named health platforms.
The data ends up in the medical record at the healthcare organization, which is a separate party from Epic with its own privacy policy.
'Securely' is Epic's own description; the passage does not explain the security method.
Not stated here
The passage does not describe how Google or Apple handle the data on their side.