Do you build HIPAA-compliant iOS apps?
We build iOS apps designed to avoid creating Protected Health
Information where none is needed. When a clinical workflow
requires PHI — scheduling, clinician review, cohort data — we
build on BAA-covered platforms such as Google Cloud for
Healthcare, Microsoft Cloud for Healthcare, or Salesforce Health
Cloud. HIPAA is a legal status that applies to covered entities
and business associates, not to software in the abstract; we
structure the engagement and the architecture so that every
party who needs a BAA has one.
Can I see a healthcare iOS app you have already shipped?
Yes. The ACE Score Test app is live on the Apple App Store
today. It runs the 10-question CDC/Kaiser Adverse Childhood
Experiences survey, the 7-item Positive Childhood Experiences
assessment from Bethell et al. (2019, JAMA Pediatrics), a
mood-tagged journal, score history with trend charts, 10
evidence-based articles, and a directory of 15 vetted crisis and
support resources. Everything runs on-device — no analytics, no
ads, no sign-in.
Which iOS technologies do you build on?
SwiftUI, Swift 6 with strict concurrency, SwiftData and Core
Data for persistence, HealthKit for sensor and health data, and
Apple's native accessibility APIs (VoiceOver, Dynamic Type,
Reduced Motion). We avoid cross-platform wrappers for healthcare
work because they add abstraction layers that complicate App
Review Section 5.1.3 evaluation and accessibility auditing.
Will my app ship under my developer account or yours?
Yours. Every app we build is submitted under the client's Apple
Developer Program account. The App Store listing, the privacy
questionnaire, and the long-term relationship with Apple all
belong to the organization whose clinical reputation is on the
line, not to the agency that wrote the code.
How long does a healthcare iOS app take to build?
A scoped screening tool like ACE Score Test takes four to eight
weeks from kickoff to App Store submission, assuming the
underlying instruments are already validated and clinical review
happens on our normal weekly cadence. A patient-facing companion
with HealthKit integration and a BAA-covered backend typically
runs twelve to twenty weeks, depending on cohort testing and how
many clinical workflows the app touches.
Do you handle the Apple App Review submission?
Yes — including the App Privacy questionnaire, the Section 5.1.3
health-and-medical justification, the App Review cover note, and
any follow-up correspondence with Apple. We write the submission
package with the clinical lead so the claim each screen makes is
backed by a citation Apple can verify.
Can you integrate with HealthKit and Apple Health?
Yes. We request HealthKit permissions at the data-type level,
explain each request in plain language, and default to opt-in
rather than bundled consent. Reads and writes are scoped to the
clinical workflow that needs them, and we never mirror HealthKit
data off-device unless the user explicitly authorizes an export.
Who owns the source code?
You do. Every engagement ends with a source-code handoff through
the client's preferred source control (GitHub, GitLab, or
Bitbucket), a written architecture document, the signed
data-flow diagram, the App Store submission package, and enough
knowledge transfer that your team — or another vendor — can pick
up the next release.