The Patient Portal needs some UI improvements but this portal can be used by any patient with a nostr based health record to access to their own nip44 encrypted records whether on their practices relay, their own relay, or any other relay they want to host it.
The cleartext tags do contain some metadata. Anyone with whitelisted access to the private relay can see that events exist, when they were created, which pubkeys are involved, and what type of FHIR resource it is (encounter, immunization, etc.). They just can't read the clinical content without either the practice secret key or the patient's.
(I post this is for my own education and anyone else that may be curious, dev or not)