A secure medical records maintenance system and associated removable memory storage device referred to as a "personal health card" for accessing the system. The secure medical records maintenance system includes a first remote server that stores patient identification information associated with multiple patents, and a second remote server that stores patient medical data associated with the multiple patents. The medical data maintained on the second remote server cannot be correlated to the associated patient identification information maintained on the first remote server based on the information contained in the first and second remote servers. To permit correlation of the files, the personal health card stores correlation information sufficient to uniquely associate a patient's patient identification information stored on the first remote computer server with that patient's medical data stored on the second remote server.