Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Kate's App

katesapp.org

Post reply on HN
Print view View original

71–80 of 192 posts

Re: Show HN: Kate's App

#71

Post by daveguy »

roegerle wrote: post #55
daveguy wrote: post #41

Earlier quoted context omitted.

This is not true. I'm not a lawyer, but I am in the healthcare field. HIPAA very much applies to this type of app or any other type of app that may deal in personally identifying information (PII) related to healthcare.

I was too. https://www.hhs.gov/hipaa/for-professionals/covered-entities...

It would be a mistake to assume a SaaS that stores healthcare PII for coordinating healthcare is not covered under HIPAA. An exception should be filed at the very least.

Edit: If no healthcare provider has access then maybe it could skate by. I interpreted "any user making notes to your account" to mean healthcare providers would have access. Even if not, they should still seek legal counsel. And this app is literally promising safety and security of healthcare information.

Re: Show HN: Kate's App

#72

Post by [deleted] »

bhpreece wrote: post #44
rafram wrote: post #33

Privacy concerns aside, I don't really understand what the point of this is, to be honest. You can already add family/caregivers as authorized users on a MyChart (Epic) profile, which is an actual source of truth, not a separate data store that you need to update manually. This seems like a good experiment in building a CRUD app, but I'd recommend doing that with something with less liability.

I use MyChart. It's a great way for your doctor and clinic to communicate with you. It's not a place where I'm going to store contact information for all my doctors, or appointments for doctors that aren't at that clinic, or all my prescriptions and all the pharmacies. When your daughter is reacting badly to her new chemotherapy, and running fevers and throwing up, and somebody needs to call her palliative care speci…

[deleted]

Re: Show HN: Kate's App

#73

Post by bhpreece »

sotomski wrote: post #64
bhpreece wrote: post #36

Thank you everybody for your comments. Comments on legal issues: I absolutely agree and 100% plan to get legal advice. In the meantime, if you have personal experience, I would love to learn from you. Comments on HIPAA: I'm 99% sure this does not apply, since the site is for patients and their families, and no doctors, clinics, hospitals, or insurance companies are involved. All information comes from the family, and…

Hey mate, it just so happens that I’m working on a very similar thing. Maybe I could help you out regarding security and local-first stuff? Drop me an email if you’re interested. Cheers. EDIT: In any case, you could take a look at https://github.com/YousefED/Matrix-CRDT . Matrix takes care of e2ee. CRDTs give you local-first super powers.

I am interested in local-first and security. I'll get in touch.

Re: Show HN: Kate's App

#74

Post by bhpreece »

ygjb wrote: post #63
bhpreece wrote: post #36

Thank you everybody for your comments. Comments on legal issues: I absolutely agree and 100% plan to get legal advice. In the meantime, if you have personal experience, I would love to learn from you. Comments on HIPAA: I'm 99% sure this does not apply, since the site is for patients and their families, and no doctors, clinics, hospitals, or insurance companies are involved. All information comes from the family, and…

> Comments on security: This is a huge issue for me. I've followed best practices as nearly as I can, but I've also been asking around to find out who could do a comprehensive security audit, but haven't yet found anybody I trust. Does anybody have any recommendations on how to find someone? The best first step is to conduct a review yourself; you may want to hire or recruit a volunteer to do a security review, but y…

Thank you for these recommendations. I'll check out all of them.

Re: Show HN: Kate's App

#77

Post by bhpreece »

motohagiography wrote: post #27

contra view to these comments: keep going. I worked in health information privacy and security longer than all of them and the number of sincere people in it is diminishingly small. the field has become infested with gatekeeper nerds and petty bureaucrats who insist you pay their toll to proceed, or demoralized and cynical opportunists who just go along to get along. sure, there are risks, but take them. make a thing…

I could use your experience. Would you be willing to chat offline?

Re: Show HN: Kate's App

#78

Post by bhpreece »

curious_cat_163 wrote: post #15

I think you might want to heed the advice about privacy regulations in the other threads. Just thought, I'd share what I think about the substance of the idea (not the implementation). I think a big untold story in the US healthcare system is how it shifts the burden of coordinating care to patients and/or their loved ones. To be sure, there is a lot of decisions that the individual (or their NoK) should be making bu…

Thank you for the encouragement.

Re: Show HN: Kate's App

#79

Post by threatofrain »

tantalor wrote: post #57
diggan wrote: post #37

Earlier quoted context omitted.

How do you know that the authors are novices with "complete blindness" to real consequences? Where are you getting the "find a learning project" goal from? It sucks that you've been burnt by that before, but it sounds like your employer was the one who screwed you there, not the author of the application.

They don't know, it's a total guess. That's why they hedge with phrases like "smell" and "if your goal..."

Total guess implies that they closed their eyes and made a random choice. There's a reason why the top posts, including one by a lawyer (who recommends immediately shutting down the site before getting advice), are saying caution is very warranted.

Re: Show HN: Kate's App

#80

Post by gwbas1c »

diggan wrote: post #37
gwbas1c wrote: post #16

I don't want to repeat other comments here; but this app smells of a very dangerous attitude: Built with love by novices with grand intentions, with complete blindness to the real consequences that happen when novices are ignorant in their field. If your goal is to "find a learning project," I suggest finding a very different "learning project." Otherwise, keep "Kate's app" private, word-of-mouth, invite-only for und…

How do you know that the authors are novices with "complete blindness" to real consequences? Where are you getting the "find a learning project" goal from? It sucks that you've been burnt by that before, but it sounds like your employer was the one who screwed you there, not the author of the application.

Complete lack of legal compliance in the area that they are operating; the style of the name.

The issue of my employer is an example of real world consequences when a novice builds a product without understanding the rules they need to follow.

Unfortunately, there is a cohort of people in the startup scene, and who also participate in Hacker News, who don't like to hear negative feedback even when there are very clear consequences that that feedback is trying to address. Don't be one of those people, especially around issues of legal compliance.

Post reply on HN