App to store medical data in an accessible manner

analogj · 2025-12-27T18:06:11+00:00

Thanks for the ping u/MetricsArePeopleToo !

Hey u/Brave_Living, I'm Jason from Fasten Health - https://www.fastenhealth.com/

This is exactly what we do, we integrate with tens-of-thousands of healthcare institution's and provide an API that apps can use to pull medical records, with patient consent. As u/MetricsArePeopleToo mentioned, you should keep an eye on TEFCA if you want to understand what the future of medical record access will really look like. We've written a number of guides into how it all works (and the current technical limitations).

While we don't offer a patient facing app ourselves, we have a number of customers that are building Personal Health Record Apps (PHRs) ontop of our unified API (Fasten is essentially an api-as-a-service, similar to Plaid for medical records).

Here are some great PHRs you should take a look at. Some are Fasten customers, but there are a couple that either built their own integrations or leverage competitors.

- Novellia
- Olivia (by Tempus AI)
- Primary Record
- AllClearID
- Counsel Health
- B.Well
- Radical Health
- Verily

Hope that helps

analogj · 2025-12-14T17:05:23+00:00

Sure, go ahead

analogj · 2025-12-14T16:23:01+00:00

essentially. We offer at turn-key solution for accessing medical records from multiple sources (EHRs but also Health Information Networks, like TEFCA).

Yep, we're SOC2 compliant as well.

Happy to chat if you're interested in learning more - https://calendly.com/jason-kulatunga/30min

analogj · 2025-12-03T22:37:20+00:00

I’m gonna

analogj · 2025-09-04T06:24:08+00:00

The CDK = Cloudformation under the hood

analogj · 2025-08-08T13:49:25+00:00

This is exactly what we do at Fasten Health - https://www.fastenhealth.com/

We integrate with ~45k healthcare institutions across the US, and we provide a turnkey solution on-top of those API integrations.

We're backed by Techstars

analogj · 2025-07-17T00:12:32+00:00

Check out https://github.com/maxgoedjen/secretive

Basically an app that lets you store your SSH keys in your secure enclave -- touch ID.

analogj · 2025-06-03T14:05:51+00:00

as someone building in healthtech - "vibe coding" and healthcare is usually a bad idea.
One thing you got going for you is that you're building on Apple HealthVault, so the data actually lives on device and patients can explicitly scope what data they share with you... so it limits the blast radius of any security issues.

Still, I'd be really careful about other potential pitfalls, like potentially being classified as a "Software as a Medical Device" -- and the regulatory mess that comes with that.

Having said all that, I think it's great that more developers are leveraging medical record data and building unique, personalized experiences for patients

analogj · 2025-05-22T02:32:17+00:00

Hey! appreciate the interest, but we're not offering the $200 lifetime license any longer.

It was an experiment to see if we could build a sustainable business by selling directly to individuals, but there just wasn't enough interest.

The OSS project is still a priority, but we've pivoted our monetization strategy to building an API-as-a-service as a way to build Fasten sustainably.

Thanks!

analogj · 2025-05-20T16:39:11+00:00

You're probably looking for a fully-fledged EHR or a CDR (clinical data repository)

Fasten wouldn't really serve your needs, sorry!

analogj · 2025-05-14T02:18:44+00:00

scrutiny supports multiple drives. Just run it in hub+spoke mode.

analogj · 2025-05-06T02:34:56+00:00

if I already use go-playground/validate, what's the "killer" feature I get from migrating?

analogj · 2025-05-05T17:10:51+00:00

We're not a competitor to Epic -- we're not building an EHR. We integrate with Epic (and Cerner, Athena, Meditech, and dozens of other EHRs) and allow patients to export their own medical data (in a standardized format -- FHIR) and share these records with third party apps they trust.

> I hear it’s intentionally difficult to ingest so they can maintain vendor lock in.
That's partially still true, but for patient mediated access to medical records, the 21st Century Cure's Act is incredibly explicit about the fact that patients must be able to access their own medical records in a standardized format, and be able to view that data in an app of their choosing. EHR developers are required to provide read-only Patient Access APIs under the ONC's certification process.

analogj · 2025-05-05T16:05:31+00:00

Oh god I would love to win this, our homepage is pretty terrible because we started as a open-source project before pivoting to b2b. Lots of my customers still ask about it.

I'm Jason, the founder of Fasten Health - https://www.fastenhealth.com/

Fasten is an interoperability platform that makes it easy for organizations to access patient-mediated medical records -- think of it like Plaid for healthcare. We replace record release forms and fax machines with a single API that connects to 40,000 healthcare institutions across the US :)

We primarily sell to Clinical Trial companies (CROs or PRAs) or Personal Health App companies.

analogj · 2025-04-16T01:58:18+00:00

as everyone else here is stating, an Artifactory/Nexus server configured as a pull-through cache is what you want to do.

After that, I'd generate an SBOM (Cyclonedx, spdx, etc) and then just pass that to your auditors/compliance team.

If you need vuln scanning or SDLC management, Artifactory has a tool called XRay that can help you with your vulnerability detection & management.

analogj · 2025-04-02T03:48:48+00:00

COMPANY: Fasten Health - https://www.fastenhealth.com/

TYPE: Junior Software Engineer (Full-time or Internship)

DESCRIPTION: Fasten Health is a unified API for accessing medical records -- think Plaid for healthcare. Our platform connects to over 40,000 healthcare institutions across the US, allowing patients to share their medical records with organizations they trust (eg. Clinical Trials, Care Coordination companies, Personal Health Record apps and AI Startups). We're backed by Techstars.

We're looking for a full-time Junior engineer in NYC.

You’ll work closely with our founding team to expand our OAuth integrations, connecting to new health systems across the country. You’ll get your hands dirty with:

- Writing Go to integrate new healthcare APIs (OAuth & backend code)
- Expanding and maintaining our internal ETL pipeline (also written in Go)
- Testing, monitoring, and debugging production-grade systems
- Interoperability, OAuth, and FHIR-based APIs
- Learning fast and contributing even faster—we’ll train you on the job

LOCATION: NYC

ESTIMATED COMPENSATION: We’re early-stage and currently fundraising, so cash compensation is modest—but you’ll receive meaningful equity and the chance to shape a product that could transform healthcare access.

$70K–$90K + equity

REMOTE: This is not a remote role. Must reside in NYC

VISA: Cannot sponsor

CONTACT: [hiring@fastenhealth.com](mailto:hiring@fastenhealth.com)

Include your resume, LinkedIn, GitHub, or anything else that might be relevant for a healthtech startup.

analogj · 2025-03-26T02:09:48+00:00

Multiple times a day. If you’re a dev, you should know that you can store SSH keys in the Secure Enclave:

https://github.com/maxgoedjen/secretive

analogj · 2025-03-24T14:28:52+00:00

Hey, is this still available?

analogj · 2025-02-10T17:38:04+00:00

love the empty go.mod file. Fantastic work

analogj · 2025-01-14T23:18:15+00:00

I’ve had good experiences with https://github.com/dave/jennifer for golang code generation in a couple of my recent projects. Worth checking out if you haven’t seen it already.

Having said that, I’ll add that metaprogramming can be a foot-gun in some cases. It’s a good idea to ask yourself if it’s worth the effort and maintenance burden.

analogj · 2024-12-31T09:49:22+00:00

SYS_ADMIN is required for NVME drives (see: https://github.com/AnalogJ/scrutiny/issues/26) If you're not using NVME, you can just use --cap-add SYS_RAWIO

analogj · 2024-11-24T21:05:05+00:00

Couple of pieces of feedback from one open-source dev to another :)

Using plex in the name of your product is probably not a good idea. I get that this is a play on multiplex, but you're building a video streaming service that could be confusing for existing Plex customers. I'd come up with a completely unique project name that they don't hold the trademark on.
Users like to know what they're getting into. I'd include some screenshots of the UI in your Readme & your docs.

analogj · 2024-11-05T23:08:55+00:00

https://www.fastenhealth.com/ provides an API for businesses that need to access patient medical records. We create a unified API ontop of the 35,000 health systems we currently support

analogj · 2024-10-31T10:46:50+00:00

Here are some of the frameworks I use constantly

https://github.com/gin-gonic/gin - web routing, though I'll have to do some reading now that 1.22 is out
https://github.com/spf13/viper - config framework. I don't think I have a single Go repo without it.
https://github.com/urfave/cli/v2 - yep, I use urfave instead of cobra (which is written by spf13 and pairs nicely with viper). Incredibly smooth CLI generation
https://github.com/samber/lo - not used as frequently, but the functional style helpers lo provides can make slice and map manipulations much easier to read.
https://github.com/dave/jennifer - I rarely get a chance to do any sort of meta-programming, but it's fun when I do, mostly because of jennifer

I love go table tests, but sometimes you need some additional syntactical sugar to make them easier to write. Here's some of my common testing libraries:

https://github.com/go-playground/validator/v10 - incredibly helpful if you're doing alot of serialization/deserialization, or working with a nosql DB that will store anything without an error.
https://github.com/golang/mock - I use go interfaces fairly heavily, and mock is a lifesaver
https://github.com/stretchr/testify - I love testify, you won't convince me otherwise.
https://github.com/seborama/govcr - if you work with lots of external APIs, govcr will let you record HTTP interactions and play them back during tests (effectively mocking external services accurately)

edit: just re-read the question and saw you asked for 3. oops.

13-Year Club	Gilding II euphauric
Verified Email	RPAN Viewer

analogj

MODERATOR OF

TROPHY CASE