Elon Musk is once again promoting his AI chatbot Grok as a tool for medical analysis.
But in a public exchange on X, Grok itself directly contradicted that encouragement, warning people not to upload sensitive health information.
On Tuesday Musk wrote, “You can just take a picture of your medical data or upload the file to get a second opinion from Grok.”
The post amplified praise for Grok 4.20, which DogeDesigner described as “insanely good and quick at analyzing blood tests,” adding that people could “literally upload your lab results — even an MRI — and Grok breaks it down for you.”
The endorsement quickly gained traction, drawing millions of views within an hour.
But almost immediately, people began asking a basic question: Is Grok HIPAA compliant?
Grok’s answer was clear.
“No, Grok is not HIPAA compliant. Our privacy policy advises against sharing sensitive health data, and we don’t collect or process it. For medical advice, consult a professional.”
When pressed again after some poeple pointed out Musk’s post, Grok reiterated its position:
“While Grok can analyze uploaded data for insights, it’s not a medical professional or HIPAA-compliant. Elon’s post highlights the capability, but we strongly recommend not sharing sensitive info and consulting doctors for opinions.”
Another person asked directly whether Musk’s recommendation to upload medical data was a bad idea.
Grok responded: “Yes, that’s correct. Grok is not HIPAA compliant, and we strongly advise against uploading sensitive medical data. For health advice, always consult a qualified professional.”
The exchange created an unusual public contradiction. Musk encouraged people to upload scans and lab results for a “second opinion,” while his own AI tool repeatedly warned against doing exactly that.
Musk’s Ongoing Push Into Health
This wasn’t the first time Musk has positioned Grok as a health tool.
In October 2024, he encouraged people to submit PET scans and MRIs to Grok, saying it was “already quite accurate.”
In January 2026, a resurfaced video showed him claiming he had “seen cases where it’s actually better than what doctors tell you.”
There is some research suggesting Grok performs well in certain medical imaging tasks.
A peer-reviewed study published in Diagnostics in May 2025 compared ChatGPT-4o, Grok, and Google’s Gemini across 35,711 brain MRI slices.
Grok performed strongest in identifying the pathologies in that study.
Still, researchers noted limitations. Dr. Laura Heacock of NYU Langone said “non-generative AI methods continue to outperform in medical imaging.”
Doctors who previously tested Grok after Musk invited people to try it reported errors.
In some cases, the chatbot missed a tuberculosis diagnosis, confused a broken clavicle with a shoulder injury, and incorrectly interpreted a benign mammogram image.
Those mistakes highlight the gap between experimental AI performance in controlled studies and real-world medical decision-making.
Privacy And Regulatory Concerns
Beyond accuracy, privacy experts have raised red flags.
Medical data is among the most sensitive personal information someone can share.
Experts have warned that people may not fully understand how uploaded data is handled, stored, or used.
Grok itself has acknowledged that it is not HIPAA compliant and advises against sharing sensitive health information.
At the same time, regulators are taking a closer look at the broader platform.
Ireland’s Data Protection Commission announced an inquiry into X over reports involving non-consensual image generation using the tool.
The probe will examine compliance with GDPR rules. A prior action in August 2024 had already restricted the use of EU user data to train Grok.
The public back-and-forth on X added fuel to an already heated debate over how AI should be used in health care.
For now, Grok’s medical capabilities continue to draw attention online.
But the exchange shows a clear divide between marketing claims about what AI can do and the legal and ethical limits surrounding how it should be used.
As the debate unfolds, people are left with two competing messages: one encouraging them to upload medical data for a second opinion, and the other warning them not to do it at all.