Public White Paper
How Health Insight 365 supports practical lifestyle improvement
Executive summary
Health Insight 365 is a lifestyle improvement application that uses bloodwork as one source of information. It helps users understand reported markers, connect those markers with personal context, and consider practical changes involving activity, nutrition, hydration, sleep, stress, and appropriate clinical follow-up.
The user need
A laboratory report usually presents measurements, abbreviations, and reference ranges. It may not help a person understand which results deserve attention or how everyday habits relate to those results. Health Insight 365 organizes this information into a more approachable format while preserving clear limits around medical interpretation.
Product approach
| Capability | Benefit to the user |
|---|---|
| Guided first-use dashboard | Explains what happens next, provides direct profile and upload actions, and distinguishes example placeholders from personal results. |
| Analysis Engine processing | Organizes supported report data and reduces manual entry. |
| Marker-focused insights | Directs attention to results that may benefit from review. |
| Longitudinal overall summary | Organizes supported patterns across available bloodwork while keeping the latest-report evidence visible. |
| Recommendations and action tracking | Presents practical educational options aligned with relevant markers and lets users record planned, active, paused, or completed actions. |
| Lifestyle and trend context | Connects educational guidance, tracked actions, and developing report history without claiming that an action caused a laboratory change. |
| Personal context | Keeps symptom and permitted activity information alongside the applicable report. |
| Report history | Helps users revisit prior analyses and track their information over time. |
| Side-by-side bloodwork comparison | Initially orders reports by date and shows each report’s own values and laboratory ranges. Users can temporarily filter, rearrange, or hide columns without changing source reports or the separate Abnormal Marker Trend; Compare choices end with the signed-in app session. |
Responsible use of the Analysis Engine
The Analysis Engine helps extract report content and organize educational insights. Health Insight 365 limits the information used to what is needed for the requested function, applies validation and application rules, and presents the result as educational guidance rather than a diagnosis. Analysis Engine output can be incomplete or incorrect, so users should verify important information against the original laboratory report and consult a qualified healthcare professional.
Evidence and source diversity
Health Insight 365 is designed to use reputable health information from the United States and other established public-health and clinical sources, including sources from Canada and Europe when relevant. Source context helps users understand the basis of recommendations and avoids relying on a single institution or country.
Privacy and security principles
- Collect and use information only for stated application functions.
- Protect account identifiers and health-related records in transit and at rest.
- Separate each user’s records through authenticated, user-scoped access controls.
- Apply consistent protections across email, Google, and Apple account creation and sign-in.
- Record important account and consent events to support security review and disputes.
- Provide account deletion and retention practices described in the Privacy Policy.
Identity protection
Direct account identifiers are encrypted, and pseudonymous lookup values support reliable sign-in without routine plaintext lookup. Pseudonymization reduces exposure but does not make health or account data anonymous. Health Insight 365 therefore continues to apply access controls, monitoring, retention limits, and incident-response practices.
Security validation
Health Insight 365 uses layered security review rather than treating any single scan as proof of security. Recent validation included authenticated and unauthenticated web-application scanning, controlled Metasploit Framework assessment of the staging environment, two-account authorization testing, session-management testing, upload-abuse and malware-control testing, dependency and secret review, and mobile source-code analysis. The staging assessment reviewed externally visible service information, permitted HTTP methods, transport security, and common public discovery paths without attempting exploitation or accessing user data. It reported no high- or medium-risk findings. Identified application errors and forwarding-header rate-limit weaknesses from earlier testing were corrected and regression-tested. Mobile analysis also identified development-only local-network configuration and diagnostic logging that must remain excluded or constrained in production builds.
These activities support an ongoing risk-management program aligned with relevant OWASP and NIST practices. They are not a certification, legal opinion, guarantee against compromise, or substitute for independent penetration testing and continuous monitoring. Security controls and public statements are reviewed as the application and its service providers change.
Privacy governance
The published Privacy Policy describes collection, purposes, service providers, retention, deletion, security safeguards, and individual rights. Health Insight 365 does not sell personal information or share it for cross-context behavioral advertising. California requests are supported even when statutory business thresholds may not apply. The application is currently limited to the United States; before an offering in the European Economic Area or United Kingdom, Atilasllc will complete a formal review of GDPR territorial scope, legal bases, special-category health-data conditions, international transfers, and representation requirements.
Business model
Health Insight 365 uses a pay-per-analysis model instead of a recurring subscription. The first eligible analysis is free, and later analyses require a one-time in-app purchase at the price disclosed before purchase.
Important health information
Health Insight 365 provides educational information to support personal wellness and informed conversations with a qualified healthcare professional. It does not diagnose disease, prescribe treatment, replace professional medical care, or provide emergency services. Users should seek urgent medical help for an emergency.
User control and activity visibility
Optional profile measurements include waist, with conversion of recognized imperial and metric values. A recent activity view helps users review account events without presenting a complete forensic history. Sign-in IP and approximate device-reported location require separate opt-in choices; iPhone location permission is also required. Neither location nor an IP address proves identity, and location is not collected continuously.
An optional App Lock provides an additional on-device privacy control for the authenticated App. The user enables it per account and per iPhone. Apple’s Local Authentication framework performs Face ID or device-passcode evaluation, while Health Insight 365 receives only the result and does not receive or retain biometric data or the device passcode.
Upload authorization acknowledgments, separate policy review, and report export disclaimers reinforce informed use. Security testing and release validation remain ongoing risk-management activities, not a guarantee against every threat.