Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Kate's App

katesapp.org

Post reply on HN
Print view View original

111–120 of 192 posts

Re: Show HN: Kate's App

#111

Post by skrebbel »

netdevphoenix wrote: post #95
nkozyra wrote: post #26

Earlier quoted context omitted.

While I agree that they probably aren't, their intended customer base is. And even so, nothing precludes people from pursuing civil damages if there's a data breach - this is far more likely with sensitive data coming from a medical provider to a third party. And as has been hinted at, the lack of professional presentation is going to hurt a lot, and people will immediately ask "can I trust this platform with any of…

Probably not even a data breach. A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit. Once it is under the eye of the state, OP will be in big legal trouble. Building apps is cool but any app that uses critical stuff like real world infrastructure or personal data needs careful treading

> A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit

Why? What's in it for them?

I'm not saying this can't happen, I'm just not sure I understand why you think it's so likely to happen.

Re: Show HN: Kate's App

#112

Post by astura »

roegerle wrote: post #9
otterley wrote: post #3

If you're dealing with personal health information (PHI), I would advise you to temporarily close your site and hire a lawyer straight away. Whenever you touch this kind of data, regulatory regimes like HIPAA may apply, and you need to be extremely careful. There's not a HIPAA compliance or even a privacy policy statement available on your front page. See https://www.hhs.gov/hipaa/for-professionals/privacy/laws-reg..…

Are they a covered entity?

No.

Re: Show HN: Kate's App

#113

Post by fnimick »

skrebbel wrote: post #111
netdevphoenix wrote: post #95

Earlier quoted context omitted.

Probably not even a data breach. A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit. Once it is under the eye of the state, OP will be in big legal trouble. Building apps is cool but any app that uses critical stuff like real world infrastructure or personal data needs careful treading

> A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit Why? What's in it for them? I'm not saying this can't happen, I'm just not sure I understand why you think it's so likely to happen.

Damages? The potential payout is enormous.

Re: Show HN: Kate's App

#114

Post by skrebbel »

fnimick wrote: post #113
skrebbel wrote: post #111

Earlier quoted context omitted.

> A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit Why? What's in it for them? I'm not saying this can't happen, I'm just not sure I understand why you think it's so likely to happen.

Damages? The potential payout is enormous.

Yeah but, how can there be damages without a breach?

Re: Show HN: Kate's App

#115

Post by joseda-hg »

bagels wrote: post #84

Confused: Who uses this, the patient or the medical staff (nurses and doctors, etc.)? "Organize your support team for your health care." "Kate's App is a tool created to support medical caregivers"

Based on a quick glance, neither, a Caretaker uses it for someone under their care,

Re: Show HN: Kate's App

#118

Post by rob74 »

fnimick wrote: post #113
skrebbel wrote: post #111

Earlier quoted context omitted.

> A user's friend/relative who is a lawyer or works in health care or know someone who does will see the app and inmediately begin proceedings for a lawsuit Why? What's in it for them? I'm not saying this can't happen, I'm just not sure I understand why you think it's so likely to happen.

Damages? The potential payout is enormous.

An enormous payout from a guy who built an app as a side project? Ok, you could push the guy into bankruptcy, but I doubt that you will ever see an "enormous payout"...

Re: Show HN: Kate's App

#119

Post by brentjanderson »

bhpreece wrote: post #67
otterley wrote: post #3

If you're dealing with personal health information (PHI), I would advise you to temporarily close your site and hire a lawyer straight away. Whenever you touch this kind of data, regulatory regimes like HIPAA may apply, and you need to be extremely careful. There's not a HIPAA compliance or even a privacy policy statement available on your front page. See https://www.hhs.gov/hipaa/for-professionals/privacy/laws-reg..…

I would appreciate a recommendation. I'm in Minnesota.

IANAL either but if I were you, I’d start here: https://www.vanta.com/products/hipaa or look for competitors.

And perhaps look at Stripe Atlas for getting my corporate ducks in a row to start with. https://stripe.com/atlas

Wading into that to get oriented, you would then be better equipped to have at least a baseline. A corporate attorney would be the next step to verify what you’re doing.

Minnestar.org hosts networking events that may be useful for finding people in the intersection of tech, healthcare, and law. Attend and get some face time to find people who may want to help. Lots of corporate centers in Minneapolis (assuming you’re in or near the twin cities), including healthcare. Depending on financial considerations, you may be able to find on ramps to grants, investors, or donors to fund compliance. Not sure on that though, but it’s possible.

Good luck!

Re: Show HN: Kate's App

#120

Post by rabidonrails »

I think the fear-mongering here has spiraled out of control. This app seems to be a place that patients (and their caregivers read:family) can upload and share data amongst themselves.

While you might not fall directly under HIPAA laws (as I don't think you a covered entity nor a Business Associate) you definitely are aware that you will have PHI and thus you have to protect it - especially if you're saying that it's "Private" and "Secure."

I'd focus on making sure that all data is encrypted in transit and at rest and that all systems on your side are locked down. You and anybody that might have access to your database shouldn't have free access this data. I'd read through some of the HIPAA guidelines especially from the business associate side and conform to those.

Don't be scared by everyone here. Read up on the HIPAA guidelines, check out HITRUST, never take your eye off security. Keep getting better.

If you're worried, you can always consult a lawyer or even an auditor for some advice (I'm neither).

Post reply on HN