"Free" EHRs: A Faustian bargain on patient privacy?

One of the biggest barriers to wider adoption of electronic health records (EHRs) is affordability. Regardless of whether you "rent" (ie, pay a monthly fee for access to a web-based product) or "buy" (ie, purchase a license to put the software on your own computer), the first-year costs for a respectable system are $15K-$25K per clinician. It was inevitable, therefore, that some "free" products would enter the market. As it turns out, there's no such thing as a free lunch.

First came a non-commercial alternative, VistA-Office, which the government has already paid for. VistA-Office is the office-based version of the VistA system that has been so successfully deployed in the US Department of Veterans' Administration, and it can be downloaded without charge from a non-profit, government-sanctioned vendor called WorldVistA. Of course, there's more to the cost of an EHR than just the software, so though the license is free, a potential user would still have to pay for hardware, implementation, training, support, and maintenance. Nevertheless, it's always great, and economically efficient, when the government is able to create commercial spin-offs from work it's already funded.

If VistA-Office can be thought of as a non-commercial approach to "free" EHRs, Practice Fusion, a San-Francisco-based startup is its hyper-commercial opposite. Launched last August, the company's original plan was to offer their EHR without charge in return for access to the deidentified clinical data generated by users, which the company would sell to pharma companies, insurers, and researchers. If that isn't controversial enough, the company announced last Friday that they'll be partnering with Google's advertising arm, AdSense, to put context-sensitive ads on the EHR in real-time. As described in the San Francisco Chronicle: "When a doctor using the service calls up a patient's health record, AdSense will recognize certain keywords -- such as "diabetes" -- and ads related to that condition will appear on the page."

I assume that all of this is HIPAA-compliant, though it would take some convincing that no places or dates of service are being compromised when ads are being delivered to a physician's EHR in real-time based on what they type into the system. And we haven't event talked about state laws yet.

Regardless of whether it's legal, this approach does pose issues for physician-patient trust. For example, does a physician really know what they're getting into? The slippery slope has already been demonstrated. In August, the story was:

The “completely hosted, community-based model” EHR will be subsidized on the back end by selling de-identified data to insurance groups, clinical researchers and pharmaceutical companies, said CEO Ryan Howard.

Now, seven months later, it's clear that selling data isn't going to generate enough revenue.

Practice Fusion's deal with Google is what makes a free medical records system possible. Google's AdSense program will generate ads that will be displayed as the records system is used.

What's next if that doesn't work? If I'm already using the product, do I get a say in how it's expanded? If I don't like that, is my only option to leave, with all of the switching costs that that would entail?

Practice Fusion claims that health insurers will be eager to get into this action as well. Insurers have a hard enough time trying to keep patients on their formularies. How much harder will that be when drug ads are being inserted into the physicians' thought process at the point-of-care?

Purely on a user-interaction level, I'm not sure how many physicians will like having ads on their screen (actually, I am sure but I don't have any data to back me up). It's already a challenge to figure out how to present meaningful medical information on a screen without overloading the user. Dynamic ads won't help that.

Finally, but most important, how will patients feel about this? The first time a patient sees a Paxil ad pop up on his physician's screen, the questions will start flying. And the physician will be in the awkward position of saying that those ads don't affect his/her decision-making, that the company generating those ads is Google, but not to worry, through the magic of technology, Google has no access to private medical records (and the physician will be crossing his/her fingers hoping that that's true).

Practice Fusion's CEO says that "he does not expect data-sharing will be a concern to physicians who accept the free EHR." If that's true, it's only because they haven't asked their patients yet.