None declared
It depends on how you feel about tracking: epocrates declares data used to track you. The sensitive items are location, user content and browsing history. In total the label lists 10 data types; 8% of medical records apps we checked declare tracking.
epocrates privacy in one look
- 1Collects nothing
- 2Not linked
- 3Linked
- 4Tracks you
Built only from the developer's App Store label. It describes disclosure, not tested behaviour.
epocrates' developer reports using usage data to track you across other companies' apps and websites.
Did epocrates ask for something?
Pick the permission prompt you saw. We compare it with what epocrates' developer declared.
epocrates lists Location on its label, linked to you. Choose While Using and turn off Precise Location if the feature works without it.
epocrates lists User Content on its label, linked to you. Choose Limited Access and pick only the photos you want to share.
Contacts is not on epocrates' label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.
epocrates declares data used to track you, so expect the “Allow to track?” prompt. Tap Ask App Not to Track; the app must keep working without it.
Health & Fitness is not on epocrates' label. That can be fine: data used only on your iPhone does not have to be declared. If the data would need to leave the phone for the feature to work, ask why it is missing.
A permission is what the app can reach on your iPhone; the label is what the developer says leaves it. They answer different questions.
What epocrates collects, explained
| Data type | What it covers | Where to limit it |
|---|---|---|
| LocationSensitiveLinked to you | Where your phone is, either precisely (street level) or approximately (city or area). | Settings › Privacy & Security › Location Services: choose Never or While Using, and turn off Precise Location if the app does not need it. |
| User ContentSensitiveLinked to you | Messages, photos, videos, audio recordings, documents and support chats you create or upload. | Settings › Privacy & Security › Photos: choose Limited Access or None; review Microphone and Files access too. |
| Browsing HistorySensitiveLinked to you | Websites and other content you viewed that is not part of the app. | In browsers, use private tabs and clear history; Settings › Apps › Safari has Safari's own controls. |
| Search HistoryLinked to you | Searches you run inside the app. | Look for a clear-history or private-search option in the app. |
| Contact InfoLinked to you | Your name, email address, phone number or postal address. | Use Sign in with Apple with Hide My Email where offered, and check the app's account and marketing preferences. |
| PurchasesLinked to you | What you have bought or tend to buy. | Review in-app marketing settings; subscriptions are listed in Settings › [your name] › Subscriptions. |
| IdentifiersLinked to you | An account ID, screen name, customer number or a device-level ID such as the advertising identifier. | Settings › Privacy & Security › Tracking: turn off Allow Apps to Request to Track, or tap Ask App Not to Track when prompted. |
| Usage DataUsed to track youLinked to you | What you tap, open and view inside the app, plus which ads you have seen. | There is no single iOS switch. Look for an analytics or personalised-ads toggle in the app's own settings. |
| Other DataLinked to you | Any data the developer did not fit into Apple's named categories. | Read the app's privacy policy, linked from its App Store page. |
| DiagnosticsLinked to you | Crash logs, launch times, hang rates and energy use. | Settings › Privacy & Security › Analytics & Improvements › Share With App Developers controls what Apple passes on; the app's own crash reporting is separate. |
What epocrates' label means for you
epocrates' label has 1 type under “Data Used to Track You”, 10 types under “Data Linked to You”. A data type can appear in more than one section when it is used for different purposes — for example, identifiers used for both analytics and advertising.
Tracking is the declaration that most separates apps. It means usage data from epocrates can be combined with data from other companies to target or measure ads, or shared with data brokers. On iOS 14.5 and later, the app must ask your permission before tracking you through the advertising identifier; answering “Ask App Not to Track” blocks that identifier and tells the developer you have declined.
The items that deserve the most attention are location, user content and browsing history. Location history reveals home, work and routines. Precise location deserves the most scrutiny.
Medical-record apps hold diagnoses, prescriptions and insurance details. Patient portals from your provider are bound by health-privacy rules in a way most standalone apps are not. Confirm the app is published by your hospital, insurer or a well-known records service, and turn on its login lock.
Among the 191 medical records apps in our snapshot with a label, 8% declare tracking, 71% collect data linked to you and 20% say they collect nothing. epocrates lists 10 data types, more than the average of 4.8 for this group.
Medical apps may hold the most sensitive data on your phone. Whether US health-privacy law applies depends on who runs the app, not on the App Store category.
Settings to check for epocrates
- 1
Tracking
Settings › Privacy & Security › Tracking. If “Allow Apps to Request to Track” is off, apps cannot ask, and they are told to treat you as having declined. You can also turn it off for this app alone.
- 2
Location
Settings › Privacy & Security › Location Services › epocrates. Choose While Using or Never, and switch off Precise Location if a city-level answer is enough.
- 3
Photos
Settings › Privacy & Security › Photos. Limited Access lets you pick exactly which pictures the app can see; Add Photos Only lets it save without reading your library.
- 4
Health
Health app › your profile picture › Apps › epocrates. Turn categories on one at a time; the app cannot tell which ones you declined.
- 5
Sign-in
When creating an account, Sign in with Apple can give the app a relay address from Hide My Email instead of your real one.
- 6
Lock the app
On iOS 18 and later, touch and hold the icon and choose Require Face ID. Anyone who picks up your unlocked phone then needs your face, fingerprint or passcode to open it.
Does epocrates track you?
Usage data. Apple defines tracking as linking data from this app with data from other companies' apps, websites or offline sources for targeted advertising or ad measurement, or sharing it with a data broker.
Lock epocrates behind Face ID
- Find epocrates on your Home Screen or in App Library.
- Touch and hold the icon until the quick-actions menu opens.
- Tap Require Face ID (or Require Touch ID / Require Passcode, depending on your iPhone).
- Tap Require Face ID again to confirm. epocrates now asks for authentication every time it opens.
The lock is an iPhone feature, so it works whether or not epocrates has a passcode of its own. It does not change what the app sends to its developer.
About epocrates
| Developer | Epocrates |
| App Store category | Medical (also Health & Fitness) |
| Latest version | 26.10.2, released October 2026 |
| First released | February 2019 |
| Requires | iOS 17.0 or later |
| Size | 226 MB |
| Age rating | 12+ |
| Languages | 1 (EN) |
| Bundle ID | com.Epocrates.Rx |
The current version shipped in October 2026, so the app is actively maintained and its label is likely current. Labels are updated by developers when practices change.
What the label cannot tell you
- A label is self-reported. Apple publishes the developer's answers and can reject apps that misrepresent them, but it does not independently verify what epocrates sends.
- It does not say where data is stored, how long it is kept, whether it is encrypted, or which companies receive it. The privacy policy covers those points.
- Optional data counts: if a feature lets you add something (a profile photo, a phone number), the type is listed even if you never use the feature.
- Data handled only on your iPhone is not 'collected', so a no-collection label is compatible with an app that reads your files locally.
- Third-party sign-in, payment processors and SDKs are supposed to be included, but a label can lag behind a new version.
The question to ask epocrates' developer: Is this app run by my healthcare provider, or a third party?
epocrates vs similar medical records apps
- epocrates (this app)
- Sutter Health My Health Online
- Doctolib
- MediRecords
- SimplePractice for Clinicians
- AdventHealth
- Freed
- Be Healthy
Fewer types is not automatically safer: a cloud backup app has to collect your files to work. Compare like with like.
Look up any of our apps in seconds, or put two labels side by side.
Apps similar to epocrates
All medical records apps → Who tracks you? A–Z → Apps that collect location → Privacy label decoder →
Your epocrates privacy checklist
Done. You have applied every control the label points to.
True or false?
- Right.Not quite.
True: it lists usage data under Data Used to Track You.
- Right.Not quite.
Labels are self-reported by developers. Apple can reject or remove apps that misrepresent practices, but it does not audit each label.
- Right.Not quite.
True: Location appears on its label.
- Right.Not quite.
It is collected and sent; the developer says it is de-identified rather than tied to your account or device.
- Right.Not quite.
Apple's rules require apps to work the same whether or not you allow tracking.