A method of operating a medical analytics platform, the medical analytics platform comprising an analytics service provider, ASP, system and a protected health information, PHI, system , the method comprising: storing, by at least one processor of the ASP system, de-identified medical study data on at least one nontransitory processor-readable storage medium of the ASP system ; storing, by at least one processor of the PHI system, PHI data associated with the de-identified medical study data on at least one nontransitory processor-readable storage medium of the PHI system ; sending, by the at least one processor of the ASP system, de-identified medical study data for a requested medical study to the client processor-based device over at least one communications network; validating, by the at least one processor of the ASP system, the client processor-based device's status to access the PHI system based on an encrypted PHI access token sent from the PHI system, wherein the encrypted PHI access token is previously sent by the ASP system to the client processor-based device in response to a request for a PHI access token from the client processor-based device and is received by the PHI system in a request for PHI data for the medical study from the client processor-based device; responsive to the ASP system's validation of the client processor-based device's status to access the PHI system, sending , by the at least one processor of the PHI system, PHI data for the requested medical study to the client processor-based device over at least one communications network, wherein the requested medical study is re-identified based at least in part on the de-identified medical study data and the PHI data without providing the ASP system access to the PHI data; generating, by the at least one processor of the ASP system, analytics data relating to the de-identified medical study data; and sending, by the at least one processor of the ASP system, the generated analytics data to the PHI system over the at least one communications network. storing, by at least one processor of the ASP system, de-identified medical study data on at least one nontransitory processor-readable storage medium of the ASP system ; storing, by at least one processor of the PHI system, PHI data associated with the de-identified medical study data on at least one nontransitory processor-readable storage medium of the PHI system ; sending, by the at least one processor of the ASP system, de-identified medical study data for a requested medical study to the client processor-based device over at least one communications network; validating, by the at least one processor of the ASP system, the client processor-based device's status to access the PHI system based on an encrypted PHI access token sent from the PHI system, wherein the encrypted PHI access token is previously sent by the ASP system to the client processor-based device in response to a request for a PHI access token from the client processor-based device and is received by the PHI system in a request for PHI data for the medical study from the client processor-based device; responsive to the ASP system's validation of the client processor-based device's status to access the PHI system, sending , by the at least one processor of the PHI system, PHI data for the requested medical study to the client processor-based device over at least one communications network, wherein the requested medical study is re-identified based at least in part on the de-identified medical study data and the PHI data without providing the ASP system access to the PHI data; generating, by the at least one processor of the ASP system, analytics data relating to the de-identified medical study data; and sending, by the at least one processor of the ASP system, the generated analytics data to the PHI system over the at least one communications network. <EOS>