Skip to content

Use case

Wearable API for Remote Patient Monitoring

Heart rate, blood pressure, glucose and sleep from consumer devices, in one auditable pipeline.

Clinical & remote monitoring

Remote monitoring programmes increasingly rely on devices the patient already owns rather than issued hardware. That means a mix of Withings cuffs and scales, Fitbit and Garmin watches, Dexcom sensors and Apple Health on the phone — and a clinical team that needs one view.

WearLink normalises the physiological families that matter clinically — heart rate, blood pressure, blood glucose, respiratory rate, body temperature, body composition — into one schema with canonical units, and records every privileged access in an append-only audit log you can export.

It is important to be clear about what WearLink is not: it is not a medical device, it holds no SOC 2 or HIPAA attestation today, and consumer wearables are not validated for diagnosis. The security page states exactly what controls exist so your compliance review can be done on facts.

What usually goes wrong

Units and reference ranges differ by device

Glucose arrives in mg/dL from some sources and mmol/L from others; temperature as absolute readings from one device and deviation-from-baseline from another. Mixing them silently is a patient-safety issue.

Access has to be provable

A programme that reads patient physiology needs to show who accessed what and when. Building that audit trail is a project in itself.

Consumer devices revise their data

Oura and Fitbit restate nights after backfill; a value shown to a clinician can change. The pipeline has to carry revisions rather than freeze the first read.

How WearLink handles it

  • Canonical clinical unitsmg/dL for glucose with mmol/L preserved, mmHg for blood pressure, degrees Celsius for temperature, breaths per minute for respiratory rate.
  • Append-only audit log with NDJSON exportEvery privileged action is recorded and exportable in one request for questionnaires and internal review.
  • Revisions delivered as eventsWhen a provider restates a record, WearLink re-emits the corrected object so downstream views never hold a silently stale value.
  • End-user export and deletionPer-user data export and hard deletion endpoints support subject-access and erasure requests.

FAQ

Clinical & remote monitoring — frequently asked

Is WearLink HIPAA compliant?
WearLink does not hold a HIPAA attestation or a SOC 2 report today. A Business Associate Agreement is available on request on the Enterprise tier, and the security page lists the controls that exist. If your buyer requires an attestation report, WearLink will not pass that review yet.
Can I read Dexcom CGM data?
Dexcom is in vendor onboarding; the OAuth application is pending. The blood-glucose page shows which providers supply glucose today and the provider status page is reconciled against the live API.
Where is patient data stored?
On isolated single-tenant infrastructure in the Asia-Pacific region (Malaysia), with additional regions available on Enterprise. API keys are stored only as hashes and meal photos have EXIF metadata stripped before storage. Region options can be discussed for Enterprise deployments.
Can a patient revoke access?
Yes. Connections can be revoked by the patient at the vendor or by you through the API, and the per-user deletion endpoint removes stored data.

Connect your first wearable today

Free for up to 3 connected users. No credit card. Your first API key is issued the moment you sign up.