All studies
Research·October 20, 2026·2 min read

Does Connecting HealthOS to Claude Give It My DNA?

For the OAuth Claude connector, DNA sharing is off by default. Over OAuth, if you turn it on, Claude gets DNA findings and lookups, never the whole genome.

For the OAuth Claude connector, the answer is no. DNA sharing is off by default when you connect. If you later tick DNA, Claude can call DNA tools. Over OAuth, DNA tools return findings and lookups, never the whole genome.

A personal MCP token created in the iPhone app can carry the DNA scope if its owner selected it. That is separate from the claude.ai custom connector.

Does connecting HealthOS to Claude give it my DNA?

DNA consent path
You connect to Claude
Custom connector
DNA starts off
General health reading is on, DNA is off
You tick DNA
Claude can call DNA tools
Whole genome
Never returned over OAuth

The short answer is no for the OAuth Claude connector, because the consent screen separates general health reading from DNA. Reading is on by default for general health data. DNA is not. Claude does not get the DNA scope until you tick it.

If you do tick DNA, what happens is more specific than most people expect. Over OAuth, Claude does not receive your whole genome. It gets permission to call DNA tools. Over OAuth, DNA tools return findings and lookups, never the whole genome.

What "DNA tools" actually return

What ticked DNA shares
DNA dataDNA offDNA ticked
Whole genome / raw genome fileNoNo
DNA findings and lookupsNoYes

Scroll the table sideways for the rest →

What the OAuth DNA scope returns versus what it never returns.

A whole genome or raw genome file means the actual sequence data. The OAuth DNA scope does not expose that. Over OAuth, DNA tools return findings and lookups, never the whole genome.

This is the thing people get wrong. Connecting the OAuth Claude connector does not mean uploading your whole genome to Claude. The data that moves is selected by the tool call, scoped by what you ticked, and limited to findings and lookups. Over OAuth, it is not a genome.

What you tick on the consent screen

The consent screen has these defaults:

  • Reading is on by default for general health data: activity, sleep, glucose, meals, and blood tests.
  • DNA, write, Ask, community, and account scopes stay off until you tick them.

To revoke access:

  • Open Settings → Connected apps and tap Disconnect.
  • It works in the app and on the web, and access stops straight away.
  • If you disconnect and connect again, choose scopes on the consent screen.

When you tick DNA, you grant a DNA scope. The connection lasts at most 365 days and then asks again. Access tokens last one hour and refresh tokens rotate. Even with DNA ticked, there are limits: 60 calls a minute and 2,000 tool calls a day per connection.

If you already ticked DNA

The follow-up question is usually "how do I undo it?" Use the revocation steps above.

Where the line is

Even with DNA ticked, Claude only gets what you ticked, and only when a question needs it. The returned findings are handled under Anthropic's privacy policy and your Claude settings. Raw genomic data is not returned over the OAuth Claude connector.

The honest limit is this: wellness information is not a medical device, and an assistant can be wrong, so check anything important with a doctor.

For a step-by-step setup and what you can ask, see the HealthOS connector.

Written by

HealthOS Research

Keep reading