put https://sandbox.elationemr.com/api/2.0/patients/:id/
You can pretty much update all the fields in the patient object except a few read-only attributes (e.x. id, created_date, deleted_date). The array-based attribute (e.x. phones, emails, insurances, tags are completely replaced by new value in the PUT.