Your health, on one dashboard — with the right layer for each job.
The private part runs on your phone. The medical part gets a doctor’s name on it. One real-time view of your health and care needs — personalized to you, and to the people you care for.
The split is the point: convenience where it’s safe, a licensed physician where it counts.
Two layers. Each does only what it should.
Most health apps blur these together and hope you don’t ask. The harness keeps them separate on purpose.
Apple Intelligence does the private part.
Trends, summaries, the questions worth asking — computed on your iPhone from data you already hold. Fast, private, and never sent to a general cloud AI.
Apple does not sign healthcare data agreements (BAAs) — so your protected health information is never handed to a general AI. On-device only does what is safe to do on-device.
A licensed physician signs the medical part.
The moment something is clinically meaningful — a lab interpreted, an interaction flagged, a plan proposed — it is drafted by AI and attested by a named physician before you ever see it.
NPI-bound, hash-anchored, auditable. A real doctor’s name on it — never a chatbot alone making a medical call.
Your dashboard
Sample data — a preview of the personalized view.
Your resting heart rate is down 4 bpm this week; sleep steady at 7h 10m. Computed on your iPhone — nothing left the device.
Why this stays private →A possible interaction between two of your prescriptions was flagged. A licensed physician reviewed it before it reached this screen — you are not reading a chatbot’s guess.
Three questions surfaced from your week — about the sleep change, a refill, and a new ache — organized and ready to bring Tuesday. Drafted on-device from your own notes.
Find the right physician →Your recent lab panel, put in plain language — then checked and signed by a physician before you saw a single word of interpretation.
Next steps: physical therapy twice this week, two-person transfers, a medication review in 14 days. Coordinated with your care team.
Coordinate care →Everything on-device above was computed on your phone. Nothing here trained a model. Nothing clinical reached you without a doctor in the loop.
Who owns the conversation? →Watch an attestation happen.
A fitness, wallet, or chat app can’t draw this step — the click that binds a signature to an output. Click Attest and the draft is hashed, signed with an Ed25519 key, and written to a durable record that survives a refresh. The signature is real and verifiable. Sample data; no patient information.
In-home companion care
…in-home companion care is medically necessary to prevent falls and preserve safe mobility and independence for a patient with progressive mobility decline.
Approve is a click. Attest is a record. Draft 1 of 3.
Signed record
0 signed & recordedNothing signed yet. Click Attest — a signed, durable record appears here.
Each record is an Ed25519 signature over the SHA-256 of the exact text, verifiable against a published public key — change one character and it fails. Independent audit and anchoring live at hashcare.com. This is a demonstration key — real cryptography, not a live clinical signature by a licensed physician.
What’s live, and what’s coming
- The governed layer — physician attestation and the Fidelity Gate — runs now.
- Ask Vera (bottom-right) — a physician-governed health chat that never trains on you.
- The physician directory and your health identity.
- The on-device layer — a native iPhone companion running Apple Intelligence on-device — is in development. The dashboard above is a working preview of that view.
- Live device sync (Apple Health, on your terms) so the numbers are yours, in real time.
Your health, on your terms.
Private where it’s safe. A physician where it counts. That’s the harness — for you, and for the people you take care of.