Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Kate's App

katesapp.org

Post reply on HN
Print view View original

101–110 of 192 posts

Re: Show HN: Kate's App

#101

Post by klibertp »

ygjb wrote: post #58
bhpreece wrote: post #52

Earlier quoted context omitted.

> app developer having a change of heart Yes. Two features high on my list of todos: 1) download all your data; 2) delete all data from the site. The second is a bit more complicated, since multiple family members may have access to the same data, and may have different opinions on deleting it. I'll work it out. Otherwise, you have only my integrity. I'm not looking to sell it, but I would love to hand this over to s…

> The second is a bit more complicated, since multiple family members may have access to the same data, and may have different opinions on deleting it. I'll work it out. I know it's been said elsewhere, but you need a lawyer. This isn't something for you to work out, it's something for you to clearly understand your legal obligations, and what your exposure is based on which jurisdictions a user might log in from.

As someone under civil law jurisdiction, I have a hard time parsing this:

> This isn't something for you to work out, it's something for you to clearly understand your legal obligations

Like, is it really impossible to "understand your legal obligations" without help from a lawyer? Is it supposed to be like that? Why? Are the laws explicitly written to be impossible to understand if you're not a lawyer?

I might have lucked out, but in the few instances where I had doubts, just reading the relevant code gave me all the advice I needed. They are written to be clear and unambiguous as much as possible - in effect, they're tedious and wordy but perfectly understandable. It's easy to recognize the complex or unclear parts because they really stand out from the rest - and that's when you ask a lawyer.

Of course, if there's a significant penalty or otherwise stakes are high, consulting with a lawyer is a good idea. But the notion of "the people" only ever interacting with "the law" through intermediaries is... strange? Then again, you don't generally risk being shot in the head for arguing with a policeman here, which might or might not be a separate issue.

Re: Show HN: Kate's App

#102

Post by Over2Chars »

Terretta wrote: post #97
Over2Chars wrote: post #96

Earlier quoted context omitted.

I am not sure that if you choose to freely share your medical information with people of your choice, it's protected or governed by HIPAA or protected PII, per se. For example, I believe Brooke Shields told the world she had post-partum depression and was prescribed some anti-depressant and felt it helped her. https://www.webmd.com/depression/postpartum-depression/featu... That's "medical information" about "a prescr…

EDIT: Developer included this in a summary: "Comments on HIPAA: I'm 99% sure this does not apply, since the site is for patients and their families, and no doctors, clinics, hospitals, or insurance companies are involved. All information comes from the family, and stays in the family." Insofar as no providers or non-family use this, developer may have a point: my comment's covered-entity reasoning can be disregarded.…

As I said, the description isn't clear about whether the regulation entity is a party to it, or is what is being shared in it (I think the clarification suggests I was right).

You, Brooke Shields, can share your information with your boyfriend, Tom Cruise, about who you see for your anti-depressants: the amount, name of the doctor, dosage. You can even use a random app developed by some Joe Dev installed through f-droid as an APK with data stored in North Korean data centers (does North Korea have data centers?). The world is yours.

Re: Show HN: Kate's App

#103

Post by netdevphoenix »

klibertp wrote: post #101
ygjb wrote: post #58

Earlier quoted context omitted.

> The second is a bit more complicated, since multiple family members may have access to the same data, and may have different opinions on deleting it. I'll work it out. I know it's been said elsewhere, but you need a lawyer. This isn't something for you to work out, it's something for you to clearly understand your legal obligations, and what your exposure is based on which jurisdictions a user might log in from.

As someone under civil law jurisdiction, I have a hard time parsing this: > This isn't something for you to work out, it's something for you to clearly understand your legal obligations Like, is it really impossible to "understand your legal obligations" without help from a lawyer? Is it supposed to be like that? Why? Are the laws explicitly written to be impossible to understand if you're not a lawyer? I might have…

You can't possibly pretend to understand the laws from every single country. That is the reason why you need a lawyer. This app targets all countries in the world. Even if it was just for the US, you would need one.

Re: Show HN: Kate's App

#104

Post by netdevphoenix »

bhpreece wrote: post #36

Thank you everybody for your comments. Comments on legal issues: I absolutely agree and 100% plan to get legal advice. In the meantime, if you have personal experience, I would love to learn from you. Comments on HIPAA: I'm 99% sure this does not apply, since the site is for patients and their families, and no doctors, clinics, hospitals, or insurance companies are involved. All information comes from the family, and…

1. you build app for people to add critical and highly personal there yet you haven't even provided your name, company or even a single policy that might make its users trust you, why are you hiding your identity? It looks shady due to that. I understand it is a beta, but I think you should have it as it affects how people perceive your app

2. what happens if I at some point give access to this app to my care assistant who works for the state health department or a health company? Surely, those people are covered entities, and you would be then under HIPPA laws. There is nothing you can do to stop that and if your app becomes popular enough, given enough time it will happen

3. For countries in the EU, you are subject to the GDPR legislation. Who is the data processor, data protection officer and the supervising authority for the data handled by the app?

Re: Show HN: Kate's App

#105

Post by Bengalilol »

Is this app for US people only? Do you know that all big companies are breaking their knees on that special subject of privacy and medicine?

It is hosted by: HOSTINGER US

Organization name: Hostinger International Ltd.

IP address: redacted

AS(autonomous system) number and organization: AS47583 Hostinger International Limited

AS name: AS-HOSTINGER

Reverse DNS of the IP: katesapp.org

City: Phoenix

Country: United States

Re: Show HN: Kate's App

#106

Post by getwiththeprog »

bhpreece wrote: post #54
dflock wrote: post #6

Great idea! - What country/ies do you accept users from and which jurisdiction do you store their data in? - Get a HIPPA/GDPR/PHIPA audit by a legal professional ASAP!

This information is all in the U.S. I haven't looked at international issues. I'll need to put it on my list.

It might be easier to launch internationally first. Many places on the planet put good will in healthcare as more important than the almighty dollar. I have dealt with lawyers a number of times. Costs can spiral out of control very quickly, so take time to think over how much you are willing to spend and what your end goals are.

Re: Show HN: Kate's App

#107

Post by klibertp »

netdevphoenix wrote: post #103
klibertp wrote: post #101

Earlier quoted context omitted.

As someone under civil law jurisdiction, I have a hard time parsing this: > This isn't something for you to work out, it's something for you to clearly understand your legal obligations Like, is it really impossible to "understand your legal obligations" without help from a lawyer? Is it supposed to be like that? Why? Are the laws explicitly written to be impossible to understand if you're not a lawyer? I might have…

You can't possibly pretend to understand the laws from every single country. That is the reason why you need a lawyer. This app targets all countries in the world. Even if it was just for the US, you would need one.

Well, obviously, I can't even read the codes of other countries! Even if I could, I wouldn't trust myself to understand them - cultural context matters for understanding. Like, how much "must" is there in "should" and similar. I'm asking more about your local laws (so, state + federal, in the US?) - obviously, if you need to cover multiple jurisdictions, that's a pain better outsourced to specialists.

Re: Show HN: Kate's App

#109

Post by netdevphoenix »

klibertp wrote: post #107
netdevphoenix wrote: post #103

Earlier quoted context omitted.

You can't possibly pretend to understand the laws from every single country. That is the reason why you need a lawyer. This app targets all countries in the world. Even if it was just for the US, you would need one.

Well, obviously, I can't even read the codes of other countries! Even if I could, I wouldn't trust myself to understand them - cultural context matters for understanding. Like, how much "must" is there in "should" and similar. I'm asking more about your local laws (so, state + federal, in the US?) - obviously, if you need to cover multiple jurisdictions, that's a pain better outsourced to specialists.

There are lots of EU folks in here

Re: Show HN: Kate's App

#110

Post by [deleted] »

otterley wrote: post #3

If you're dealing with personal health information (PHI), I would advise you to temporarily close your site and hire a lawyer straight away. Whenever you touch this kind of data, regulatory regimes like HIPAA may apply, and you need to be extremely careful. There's not a HIPAA compliance or even a privacy policy statement available on your front page. See https://www.hhs.gov/hipaa/for-professionals/privacy/laws-reg..…

[deleted]
Post reply on HN