Public White Paper
How Health Insight supports practical lifestyle improvement
Executive summary
Health Insight is a lifestyle improvement application that uses bloodwork as one source of information. It helps users understand reported markers, connect those markers with personal context, and consider practical changes involving activity, nutrition, hydration, sleep, stress, and appropriate clinical follow-up.
The user need
A laboratory report usually presents measurements, abbreviations, and reference ranges. It may not help a person understand which results deserve attention or how everyday habits relate to those results. Health Insight organizes this information into a more approachable format while preserving clear limits around medical interpretation.
Product approach
| Capability | Benefit to the user |
|---|---|
| Analysis Engine processing | Organizes supported report data and reduces manual entry. |
| Marker-focused insights | Directs attention to results that may benefit from review. |
| Lifestyle considerations | Presents practical educational options aligned with the relevant markers. |
| Personal context | Keeps symptom and permitted activity information alongside the applicable report. |
| Report history | Helps users revisit prior analyses and track their information over time. |
Responsible use of the Analysis Engine
The Analysis Engine helps extract report content and organize educational insights. Health Insight limits the information used to what is needed for the requested function, applies validation and application rules, and presents the result as educational guidance rather than a diagnosis. Analysis Engine output can be incomplete or incorrect, so users should verify important information against the original laboratory report and consult a qualified healthcare professional.
Evidence and source diversity
Health Insight is designed to use reputable health information from the United States and other established public-health and clinical sources, including sources from Canada and Europe when relevant. Source context helps users understand the basis of recommendations and avoids relying on a single institution or country.
Privacy and security principles
- Collect and use information only for stated application functions.
- Protect account identifiers and health-related records in transit and at rest.
- Separate each user’s records through authenticated, user-scoped access controls.
- Apply consistent protections across email, Google, and Apple account creation and sign-in.
- Record important account and consent events to support security review and disputes.
- Provide account deletion and retention practices described in the Privacy Policy.
Identity protection
Direct account identifiers are encrypted, and pseudonymous lookup values support reliable sign-in without routine plaintext lookup. Pseudonymization reduces exposure but does not make health or account data anonymous. Health Insight therefore continues to apply access controls, monitoring, retention limits, and incident-response practices.
Security validation
Health Insight uses layered security review rather than treating any single scan as proof of security. Recent validation included authenticated and unauthenticated web-application scanning, two-account authorization testing, session-management testing, upload-abuse and malware-control testing, dependency and secret review, and mobile source-code analysis. Identified application errors and forwarding-header rate-limit weaknesses were corrected and regression-tested. Mobile analysis also identified development-only local-network configuration and diagnostic logging that must remain excluded or constrained in production builds.
These activities support an ongoing risk-management program aligned with relevant OWASP and NIST practices. They are not a certification, legal opinion, guarantee against compromise, or substitute for independent penetration testing and continuous monitoring. Security controls and public statements are reviewed as the application and its service providers change.
Privacy governance
The published Privacy Policy describes collection, purposes, service providers, retention, deletion, security safeguards, and individual rights. Health Insight does not sell personal information or share it for cross-context behavioral advertising. California requests are supported even when statutory business thresholds may not apply. The application is currently limited to the United States; before an offering in the European Economic Area or United Kingdom, Atilasllc will complete a formal review of GDPR territorial scope, legal bases, special-category health-data conditions, international transfers, and representation requirements.
Business model
Health Insight uses a pay-per-analysis model instead of a recurring subscription. The first eligible analysis is free, and later analyses require a one-time in-app purchase at the price disclosed before purchase.
Important health information
Health Insight provides educational information to support personal wellness and informed conversations with a qualified healthcare professional. It does not diagnose disease, prescribe treatment, replace professional medical care, or provide emergency services. Users should seek urgent medical help for an emergency.