OpenAI's recent launch of ChatGPT Health has stirred significant concerns about user security and data protection. Positioned as a health-focused chatbot, it offers users a platform to access health information while promising enhanced security features like encryption and compartmentalization of conversations. However, the rollout raises critical questions about how secure user data really is. Users have the option to link their medical records to the service, potentially sharing sensitive information with third parties like Apple Health. Trusting a private company with this data for health advice introduces inherent risks, especially given the imperfect nature of technology. Despite claims of robust encryption and security measures, details on how health data will be safeguarded remain vague. OpenAI collaborates with a network health data firm, b.well, to access medical records through established standards, but concerns linger about the lack of end-to-end encryption for conversations. Regulatory standards, particularly regarding HIPAA compliance, are unclear. OpenAI’s spokesperson indicated that ChatGPT Health does not have the same regulatory obligations as OpenAI for Healthcare, which is designed for use by healthcare organizations that must meet HIPAA standards. Furthermore, while ChatGPT Health is marketed as a consumer education tool that does not diagnose conditions, many users may still share personal health information out of trust or misunderstanding. This raises the risk of misinformation and potential psychological impacts, as some individuals might treat AI responses as authoritative. The broader implications of AI in health contexts are troubling, with existing evidence linking AI interactions to mental health crises. Overall, while the product aims to offer more accessible health advice, the security and ethical concerns surrounding its use are substantial.