How to Get Your Medical Records Back From a Dead Telehealth Company

Your telehealth platform is gone. The site redirects to nothing, the support email bounces, the company's LinkedIn page shows it as "closed." Somewhere in a server you can't reach, your medical records — intake, lab results, prescription history, clinician notes — sit in a database you can't access. Can you get them?

Often yes, but the path depends on how the company shut down, what state its medical entity was incorporated in, and how quickly you move. Here's the escalation ladder.

Why this matters

Your medical record from the platform — even if it's a relatively minimal asynchronous-visit file — contains information you need:

• Your prescribed medication, dose, titration schedule.
• Any lab work done through the platform.
• Clinical notes documenting the medical decision-making (useful if there's ever a question about whether care was appropriate).
• Adverse event history, allergies noted, contraindications reviewed.
• Baseline data (starting weight, starting labs) that your next provider will want.

Without it, you're starting a new medical relationship from scratch with no documented history. That's survivable but wastes time and sometimes money (redundant labs, redundant eligibility verification).

Step 1: HIPAA is your friend, usually

Under HIPAA's right-of-access rule, you're entitled to a copy of your medical records maintained by any covered entity. The telehealth platform's medical group is a covered entity. Even if the company is winding down, the legal obligation to provide records on request continues — usually for some period after closure, often six years or longer depending on state.

The right-of-access rule requires:

• A written request (email is fine).
• Fulfillment within 30 days (with a possible 30-day extension).
• Records in your requested format if "readily producible."
• Reasonable, cost-based fees only — not arbitrary retrieval charges.

Step 2: Send the formal request while the company can still respond

Don't wait. The day you hear about a shutdown, send the request. Template:

Send this to every support email, HIPAA-specific address (some platforms publish one), and the privacy officer address if published in the privacy policy. Document the send. Follow up at the 30-day mark.

Step 3: Identify the responsible entity

As we covered in Article #11, telehealth platforms are usually structured as a PC (medical group) + MSO (tech company). When the MSO shuts down, the PC sometimes continues to exist — separately owned, separately liable for records. Finding the PC is the key.

How to find the PC:

1. Check the platform's Terms of Service. The medical group is usually named there (something like "Dr. Smith Medical PC" or "TelemedGroup Professional Corporation").
2. Search your state's corporation registry for that entity name. Look for registered agent, business address, status.
3. Check the NPI Registry for the medical group entity — medical groups have organizational NPIs.
4. If the entity still exists, write to them directly — that's who holds your records now.

Step 4: State medical board escalation

If the platform ghosts your HIPAA request, the state medical board where the prescribing clinician is licensed is your next stop. State medical boards have authority to require physicians to maintain and provide patient records — including after a practice closes. File a complaint with the state medical board describing:

• The platform and its medical group.
• Your clinician's name and license number.
• Your written request for records and the lack of response.
• Dates and copies of all communications.

This often prompts a response within weeks, because the physician who signed prescriptions doesn't want a board action over records non-compliance.

Step 5: Office for Civil Rights (HIPAA complaint)

If the medical board approach doesn't work, file a HIPAA right-of-access complaint with the HHS Office for Civil Rights. hhs.gov/hipaa/filing-a-complaint. The OCR has enforced record-access violations with settlements ranging from thousands to millions of dollars; a complaint with documentation of the request-and-denial pattern is taken seriously.

Step 6: The pharmacy has parallel records

Separately, the pharmacy that filled your prescriptions has a parallel record of everything they compounded for you. This isn't your full medical record, but it does include:

• Every prescription filled, with dose and date.
• The prescribing clinician's name and NPI.
• Usually, the transmitting telehealth platform's record IDs.

Contact the pharmacy directly and ask for a "patient medication history" or "dispensing record." Pharmacies are accustomed to these requests because patients often need them for insurance, FSA/HSA documentation, or transfer to new providers.

Step 7: Bankruptcy court, if applicable

If the platform files Chapter 7 or Chapter 11 bankruptcy, patient medical records are a "consumer privacy" asset governed by specific bankruptcy rules. The court usually appoints a "consumer privacy ombudsman" for sales of consumer data. If you're a patient, you may be notified through bankruptcy court filings. Respond — this is a chance to request records before the data is sold or destroyed.

Step 8: Reconstruct from what you have

If all else fails, or in parallel with the above, rebuild your record from parallel sources:

• Your credit card statements. Dates and amounts confirm the cadence of shipments and the duration of your treatment.
• Your pharmacy records. As above.
• Your lab provider's records. If you had labs done through Quest, Labcorp, or a platform-specific partner, request directly from the lab.
• Your email archive. Prescription confirmations, shipping notices, any correspondence with clinicians.
• Your own notes. If you kept a weight log, dose log, or symptom log, bring it.

Put all of this in a single document — "my GLP-1 treatment history, January 2024 to present." This becomes your portable medical record for the new provider.

The new-provider intake

When you start with a new telehealth platform or an in-person clinician, provide the reconstructed record upfront. Most clinicians are comfortable continuing treatment with reasonable documentation of prior therapy — they don't need a perfect record, they need enough context to pick up safely.

Your new clinician may order fresh labs regardless of what the old record shows. This is reasonable; they're building their own clinical relationship. It's not wasted; it's the cost of the old platform failing you.

How long to keep trying

HIPAA gives 30 days for first response, 30 more for extensions. State medical boards typically move on complaints within 3–6 months. HHS OCR can take 6–18 months for formal enforcement. Bankruptcy proceedings can stretch 1–3 years.

Don't wait for any of these to resolve before starting new care. Run the record recovery in parallel with continuing your treatment elsewhere. The goal isn't perfect documentation; it's enough to move forward safely.