Senior Mobile App Developer HIPAA-Compliant Health App for Telehealth

We're a funded DTC telehealth brand (LegitScript-certified) building a companion health-tracking app for our patients. What you're building: iOS-first native or React Native/Flutter app (recommend your stack and justify it) Apple HealthKit integration (weight, activity, sleep, vitals) Voice-to-text logging + AI food recognition (vision model API) — meal logging without typing LLM-based parsing of free-form user input into structured data Signature metric: a proprietary daily "signal" score displayed in words, not numbers (spec provided) Doctor-report export (PDF summary a patient brings to their provider) Integration with our telehealth/pharmacy platform via API — order status, treatment plan data, refill windows Pharmacy-agnostic integration layer: architect the API connection as a modular adapter, not a hardcoded dependency. We may add or switch fulfillment partners — connecting a new pharmacy's API should mean writing a new adapter, not rebuilding the app. External data sources beyond pharmacy: design for future inputs (labs, CGM, wearables beyond HealthKit) Push notification engine tied to lifecycle triggers (day-based, behavior-based, milestone-based) — retention logic is specced, you implement it Streak/momentum mechanics, milestone celebrations, re-engagement flows — all defined in spec Non-negotiables: HIPAA compliance end to end. BAA-eligible infrastructure (AWS/GCP HIPAA-eligible services), PHI encryption at rest and in transit, audit logging, no PHI in third-party analytics. If you can't explain how you've architected for HIPAA before, don't apply. Dark-mode-first UI built to our design system (fonts, palette, and component specs provided) App Store compliance for health apps (privacy nutrition labels, HealthKit usage rules — no HealthKit data for marketing) Clean handoff: documented codebase, CI/CD, we own the repo from day one To apply, include: Portfolio of shipped telehealth/health/medical apps and proof of development. Have you built HIPAA-compliant systems? Describe the architecture in 3–4 sentences. Have you integrated HealthKit? Which data types? Fixed-price quote for the MVP broken into milestones (e.g., core tracking → HealthKit → integrations → notifications/retention → polish/submission), plus timeline. Your monthly rate for post-launch maintenance/iteration. Describe a project where you built an abstraction layer over third-party APIs that later had to support a new provider. What broke, what held? Start with the word "receipts" so we know you read this. Proposals without portfolio links and a milestone-based quote will be declined. Timeline: MVP in 12–16 weeks preferred. Long-term relationship for the right dev - Phase 2 (Android, deeper integrations) is already planned.