Jump to content

One Medical

From Consumer Rights Wiki
One Medical
Basic information
Founded 2007
Legal Structure Subsidiary
Industry Healthcare
Also known as
Official website https://www.onemedical.com

Amazon One Medical (also colloquially known as simply One Medical) is a primary care subsidiary of Amazon. The health service was formerly provided by 1Life Healthcare, Inc. before Amazon's acquisition of the company in February 2023 for $3.9 billion USD.[1][2]

Consumer-impact summary

[edit | edit source]

Patient Privacy and Safety

[edit | edit source]

AI in healthcare environments

[edit | edit source]

In January 2026, Amazon announced and rolled out "HealthAI," an autonomous AI agent integrated into the One Medical mobile app that connects to patient health information. Later in March, the agent was made available to all Amazon Prime members.[3][4]

Clinical staffers at One Medical have also anonymously raised concerns regarding pressure to hit productivity metrics and incorporate AI into their daily work.[5]

Business Model

[edit | edit source]

One Medical runs in-peson clinics, but also offers telehealth services via a subscription model. Members pay $199 USD per year, which affords them 24/7 access to these services.[6]

Incidents

[edit | edit source]

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the One Medical category.

Enshittification of senior care via Iora Health (2023-Present)

[edit | edit source]

Before One Medical's incorporation into Amazon as a subsidiary, 1Life Healthcare acquired Iora Health in September 2021. Iora Health was a company that focused its attention on Medicare populations, with the mission of providing quality care to these often vulnerable patients. By the end of July 2021, Iora cared for approximately 39,000 patients, 31,000 of whom were considered "At-Risk members."[7]

In the years following Amazon's acquisition of One Medical, patients who had long become accustomed to the high quality care provided by Iora Health were met with a far different experience, as the services were rebranded as "One Medical Seniors" and faced cuts to staffing and services.[8][9] Following a 2024 interview patient Deborah Wood, The Washington Post reported on the stark difference in the patient care experience:

Before Iora rebranded under Amazon’s takeover, patient Deborah Wood said that its doctors responded to her calling about worrying heart symptoms in the middle of the night by calling her back “every 30 minutes to make sure I was okay.” Now, she sometimes doesn’t get phone calls back for days. Instead of reaching a doctor on the other end of the line, she goes through a call center. “I’m an Amazon patient now,” she told WaPo.[9]

In an interview with PBS in July the same year addressing documents leaked to The Washington Post, reporter Caroline O'Donovan said that another way former patients of Iora Health had lost quality care after the acquisition was by Amazon outsourcing patient calls to a Tempe, Arizona call center:

[Former Iora Health] patients were obviously accustomed to being able to text with physicians' assistance, call their doctor's office, and get someone on the phone right away...When you have these 65 and older patients, many of whom have chronic healthcare issues, who are used to having a very close, intimate relationship with their healthcare provider, and now they're calling that same exact phone number, and the call is being picked up by someone who may not actually have all the details about their charts and their health conditions and stuff like that. Obviously, some of the patients have been fairly frustrated.

...There is a period of time in mid-February when this change was initially happening, when it seemed like just in this Colorado area alone, this was happening almost every day. Someone dealing with symptoms of a blood clot, someone with sudden rib pain, someone calling in with stomach pain and blood in their stool.

So in the documents that were leaked to us, there's a doctor who wrote a note saying, I don't think these call center people even realize that they're triaging patients, which is not something that they're qualified to do.[10]

Firing of Palo Alto, CA doctor who raised patient safety concerns (July 2025)

[edit | edit source]

In July 2025, Dr. Sue Kim brought forward concerns to her supervisors regarding patient safety within One Medical's Palo Alto clinics.[5] Her complaint addressed "inadequate training, unclear workflows, and insufficient support for clinicians navigating complex care issues." However, Dr. Kim was fired the following month after an internal investigation into her management by One Medical, who claimed that she had created a toxic work environment. Dr. Kim objected to this claim, citing otherwise positive performance reviews and high ratings throughout her tenure with One Medical prior to her 2024 relocation to Palo Alto.

In April 2026, Dr. Kim filed a wrongful termination lawsuit against One Medical. She alleged that her termination was a punitive measure by her former employer.[5]

Health AI rollout (January 2026)

[edit | edit source]

In January 2026, Amazon rolled out a new agentic AI assistant, "Health AI," to provide patients with a tool that they claimed existed to make "getting health care even simpler, more highly personalized, and more actionable by answering health questions, booking appointments, and managing medications." Health AI was designed with the ability to answer questions particular to a single patient's context rather than to merely use generic information, which means that the agent requires access to patient medical data (such as medical history) in order to so.

Despite Amazon's insistence that the chatbot is HIPAA-compliant, American consumers have raised concerns over a clear conflict of interest, wherein a patient's interactions with the chatbot regarding health concerns could connect them to over-the-counter solutions provided exclusively by Amazon Pharmacy.[11]

ShinyHunters Data Breach (June 2026)

[edit | edit source]

On June 13th, 2026, One Medical identified unauthorized access to its file storage system containing legacy senior patient data.[12] On June 18th, 2026, the black-hat hacker group "ShinyHunters" claimed responsibility for the attack, saying that they had exfiltrated 8.8 terabytes of data from One Medical.[13]

The breach affected patients of One Medical Seniors (as rebranded from Iora Health) based in a variety of U.S. locations:

  • Atlanta, GA
  • Cape Cod, MA
  • Charlotte, NC
  • Piedmont Triad, NC
  • Denver, CO
  • Houston, TX
  • Tucson, AZ
  • Seattle, WA

As of June 22nd, the incident was listed by the HHS' Office for Civil Rights as affecting the PHI of over 150,000 individuals.[12]

In their official statement on the matter, One Medical wrote:

We apologize for this event and are notifying affected patients directly. We take the security of patient information seriously and are implementing additional safeguards to prevent similar events in the future.[13]

One Medical was given until June 22nd to negotiate a ransom payment, or else the information would be published.[12][13] However, as of September, no leaks of the data in question have been reported since the incident. Consequently, the truth of whether or not ShinyHunters was truly the party responsible for the breach remains in question.

Services

[edit | edit source]
  • Primary care
    • One Medical Seniors
  • Telehealth

See also

[edit | edit source]

References

[edit | edit source]
  1. "Amazon and One Medical sign an agreement for Amazon to acquire One Medical". Amazon News. 21 July 2022. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  2. "One Medical Joins Amazon to Make It Easier for People to Get and Stay Healthier". One Medical. 22 Feb 2023. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  3. "Amazon One Medical introduces agentic Health AI assistant for simpler, personalized, and more actionable health care". Amazon News. 21 Jan 2026. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  4. Bulusu, Prakash; Diamond, Andrew (10 Mar 2026). "Amazon launches Health AI agent on Amazon website and app with free 24/7 access to virtual care for Prime members". Amazon News. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  5. 5.0 5.1 5.2 Caroline O'Donovan (9 Apr 2026). "Amazon's One Medical fired a doctor who raised safety concerns, lawsuit says". Amazon News. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  6. "Healthcare, without the headaches". One Medical. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  7. "One Medical Completes Acquisition of Iora Health". Futurism. 1 Sep 2021. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  8. "One Medical Completes Acquisition of Iora Health". Futurism. 17 Oct 2023. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  9. 9.0 9.1 Frank Landymore (1 Mar 2024). "Amazon-Owned Health Clinics Reportedly Training AI Chatbot to Triage Patients". Futurism. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  10. Desjardins, Lisa; Corkery, Andrew (7 Jul 2024). "Patient safety concerns arise over Amazon's One Medical call centers after document leak". PBS. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  11. Matt Evans (14 Mar 2026). "I wouldn't trust Amazon's Health AI Chatbot to use my sensitive data responsibly, even though it says it's HIPAA compliant". Amazon News. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  12. 12.0 12.1 12.2 Steve Alder (22 June 2026). "ShinyHunters Data Extortion Group Threatens to Leak 8.8 TB of Stolen One Medical Data". HIPAA Journal. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.
  13. 13.0 13.1 13.2 Jill Hughes (22 June 2026). "ShinyHunters threatens to leak One Medical Seniors patient data". Tech Target. Archived from the original on 6 Sep 2026. Retrieved 6 Sep 2026.