HIPAA-secure caregiving app with AI health insights brings records, medications and vitals into one place

HIPAA-secure caregiving app with AI health insights brings records, medications and vitals into one place

Industry

Healthcare

Services

Solution architectureBackend developmentMobile developmentUX/UI designAI engineeringCloud and DevOpsSecurity and complianceQuality assurance

Duration

May 2026 – ongoing

Team involved

9 team members

About the client

Medavize is a US digital health company based in Austin, Texas. It starts from the view that family caregivers are healthcare’s invisible workforce and need tools to be seen. The company was co-founded by Rene Gonzalez, who learned firsthand, as his father’s caregiver, how much falls through the gaps between visits.

The company’s vision is to make caregivers a recognized part of the care team and extend the reach of every clinic into the home. To get there, Medavize aims to work with health plans and care organizations, and to support paid family caregivers in state programs such as California IHSS and Texas CDS.

Business challenge

Medavize’s founders had a clear product idea and an AI-generated prototype. It could not be deployed to AWS reliably, had no infrastructure as code and was not ready for a penetration test, so it could not be trusted with real patient data.

The requirements were demanding. AI had to explain health data without inventing a severity, every vendor in the data path needed a business associate agreement, and the app had to work in full in English and Spanish.

Medavize needed a partner who could re-platform and secure the product, then carry it through to the app stores.

Delivered solution

Orangesoft built an iOS and Android app and an AWS backend, designed to meet HIPAA requirements, that gather a person’s medical records, labs, medications, vitals and wearable data in one place and turn them into organ-by-organ health insights in English and Spanish.

Medavize pulls records from hospital patient portals, reads uploaded lab reports and pill-bottle labels, syncs Apple Health and Android Health Connect, and lets patients log vitals by hand. Patients invite family members into a Family Circle with read or full access, and the whole app switches to the person being cared for.

Orangesoft also designed the AI pipeline, the security controls and the release process.

Cloud platform

Orangesoft moved Medavize from a serverless prototype to a containerized AWS platform in about six weeks.

AI

Medavize uses AI to explain health data in simplified terms, while clinical rules, reviewed by clinicians, decide what it says.

Key features

The app brings a person’s records, medications and vitals together and lets the whole family follow them.

Records in one place

Records in one place

Medavize imports records from hospital patient portals and reads uploaded lab reports and documents. Everything lands in one health profile, with the source shown for each item.

AI health insights by organ

AI health insights by organ

An interactive body map shows 13 organs, each with a status from stable to needs attention and a plain-language explanation, in English or Spanish. A fixed disclaimer accompanies every insight.

Family Circle

Family Circle

Patients invite relatives and set read or full access, which they can change at any time. Caregivers switch between the people they care for and chat with the care team.

Medications and label scan

Medications and label scan

Users add medications by search, from imported records, or by photographing a pill-bottle label in English or Spanish. The app tracks daily doses and sends on-device reminders.

Vitals, wearables and daily check-in

Vitals, wearables and daily check-in

Users log vitals by hand or sync data from Apple Health and Android Health Connect, and see trends by source. A daily check-in records mood, symptoms and vitals.

Security and compliance

Medavize was designed to meet HIPAA requirements from the first sprint. Every vendor that handles protected health information is treated as a business associate, and an independent penetration test found 20 issues, all fixed before launch.

Encryption

Data is encrypted at rest and in transit, including uploaded documents and imported records.

Caregiver access

Only the patient decides what a caregiver can see, and access is denied by default.

Audit logging

Every request is logged without health data, and logs are kept for about seven years.

Data minimization

AI prompts carry age, sex and clinical data, never the patient’s name.

Project results

Medavize went from an AI-generated prototype to a production app, now live on the App Store and Google Play in the US.

A referral program is next, so patients and caregivers can invite others to Medavize. Development continues at full pace, with new features shipping every week.

App storePlay market

Client review

Rene Gonzalez
Rene Gonzalez
Co-founder & CEO, Medavize

When we started, Medavize had a working prototype with minimal data integration, and our backend ran on a laptop. After partnering with Orangesoft, we built a HIPAA-compliant, scalable, cloud-based backend while developing front-end features one at a time in parallel. The engineers Orangesoft brought on have been fantastic, and the partnership has been very flexible, letting us scale resources up or down as needed.

Let’s talk about your product

Tell us where your product is today and what comes next. Our team will reply and suggest the next step.

Talk to our team

We're trusted by:

How does it work?
  • 1. Intro call
    During a 30-minute meeting, our domain expert dives into your business and describes the steps for future collaboration.
  • 2. Free discovery workshop
    Together with you, our technical team defines the user flow, feature list, and project risks.
  • 3. Project planning
    We provide the implementation plan, timelines and estimations for your project.
By clicking the button, I agree with the collection and processing of my personal data as described in the Privacy Policy
Our clients' success stories
Take a look at some of the projects we’ve delivered since 2011.
View all cases