https://www.truevault.com/ TrueVault is a HIPAA compliant data backend for apps, devices, and sites. Developers use TrueVault so they can develop healthcare apps without building out their own HIPAA compliant infrastructure. You access data in TrueVault via our API and native clients. Think of TrueVault as Stripe for confidential patient data. You use Stripe to store credit card data so that you are PCI compliant. Ou…
What's a use case for this?
Consumer-originated data, even though it is health data, is not protected health information (PHI) as covered by HIPAA. But, when that health data is shared with a Covered Entity (a doctor, hospital, insurance plan, or other HIPAA-defined CE) then it becomes PHI. And, the app handling the PHI needs to be HIPAA compliant.
People want information, not data. When an app takes health data and feeds it up to a doctor for diagnosis, analysis, advice, or treatment, then that data becomes PHI and your app needs to be HIPAA compliant.