HIPAA Compliant API Integration

Case Study Information

Short Description

A sophisticated, dual-integration software ecosystem designed for Mobile Care Health to automate patient data flow between Withings smart devices, the CharmHealth EHR, and HubSpot CRM. This multi-phase solution eliminates manual data entry and ensures real-time health monitoring by syncing vitals directly from patient devices to their medical records and marketing platform.

The Challenge

Mobile Care Health, a premier concierge medical provider, faced a complex operational bottleneck as their patient base and remote monitoring services expanded. Their clinicians and administrative teams were burdened with manual, multi-step processes to move critical patient data between disparate systems.

Patient health metrics from Withings devices—including weight, blood pressure, and sleep data—lived in a silo, requiring manual transcription into the CharmHealth EHR. Simultaneously, patient records and appointment history in the EHR were disconnected from their HubSpot marketing and communication platform. This fragmentation increased the risk of data entry errors, delayed clinical insights, and prevented the delivery of personalized, timely communication to their patients.

The Solution

Pell Software engineered a custom middleware solution built on a high-performance, scalable Microsoft Azure stack using .NET C#. Our team developed a two-pronged integration architecture that prioritizes both operational efficiency and rigorous data security.

Withings to CharmHealth Integration: We implemented a real-time “Webhook Handler” that listens for data triggers from Withings smart devices. As soon as a patient steps on a scale or uses a blood pressure cuff, our system captures the data, maps it to the correct patient via PAT ID or email, and pushes it directly into the Charm EHR as a “Patient Vital”. This ensures clinicians have immediate access to the most recent patient data without lifting a finger.

CharmHealth to HubSpot Integration: To bridge the gap between clinical operations and patient engagement, we built a unidirectional sync from CharmHealth to HubSpot. This routine automatically updates patient contact details, appointment histories, and laboratory statuses in HubSpot, enabling the Mobile Care team to automate follow-ups and personalized outreach based on real-time clinical milestones.

To maintain HIPAA compliance, our engineers implemented at-rest encryption and whitelisted IP access, ensuring that no sensitive health information (PHI) is permanently stored within the middleware environment.

The Outcome

The implementation of this integration ecosystem has fundamentally transformed Mobile Care Health’s operational capabilities. By automating what was previously hundreds of hours of manual data entry, the client achieved a rapid ROI through drastic overhead reduction and reclaimed clinician time.

The clinical team now operates with a higher degree of precision, as patient vitals from Withings devices are available in the EHR in near real-time, allowing for proactive medical intervention. Furthermore, the HubSpot integration has empowered their marketing team with a “360-degree” view of the patient journey, resulting in improved patient retention and more effective communication. Mobile Care Health now possesses a secure, enterprise-grade foundation that can scale seamlessly as they expand their concierge services nationwide.

Date

April 2024 – August 2024

We started work on the first integration in April of 2024 which quickly led into the subsequent development phases. We completed the work in August and now support and maintain the project to this day.

Major Features

  • Real-Time Device Sync: Automated capture of weight, blood pressure, sleep, and ECG data from Withings devices via custom webhook handlers.
  • Intelligent Patient Mapping: Robust matching logic using PAT IDs and email addresses to ensure data integrity across three different platforms.
  • EHR Vitals Automation: Direct injection of smart device data into the CharmHealth EHR Vitals API, categorized by specific data types and units.
  • CRM Data Orchestration: Automated syncing of contact information, appointment history, and “Last Lab Date” from the EHR to HubSpot.
  • HIPAA-Compliant Security: End-to-end encryption in transit (HTTPS) and at rest, with auto-scrubbing logs to ensure no PII or PHI is stored on the server.
  • Automated Authentication: Secure SMART Backend Service Authorization (OAuth 2.0) that automatically manages token refreshes for uninterrupted service.
  • Active Status Filtering: Smart logic that ensures only “Active” contacts in the EHR are synced to the marketing platform to optimize CRM usage.

Technologies Used & Keywords

  • Languages & Frameworks: .NET C#, SQL
  • Infrastructure: Microsoft Azure (App Services, Azure SQL, Azure Function Apps, Webhook Handlers)
  • Security: OAuth 2.0, JWT, SMART on FHIR Authentication, HTTPS/TLS Encryption
  • Third-party Systems: CharmHealth EHR (FHIR & Enterprise APIs), Withings Health (Public API & Notify Service), HubSpot (Private App API)

Client

Mobile Care

Client Industry

Health Care

Client Description

At Mobile Care Health, our team of dedicated providers is committed to delivering exceptional care tailored to your individual needs. With expertise across a variety of specialties, our professionals combine advanced knowledge with a compassionate approach to ensure you receive the highest quality of care. Trust our experienced team to support your health journey with personalized attention and expert guidance.

Contact Us

Reach out today to get a free consultation for your next project

  • Client-oriented
  • Results-driven
  • Independent
  • Problem-solving
  • Competent
  • Transparent

Schedule Free Consultation

This field is for validation purposes and should be left unchanged.
Name(Required)
This field is hidden when viewing the form
This field is hidden when viewing the form
This field is hidden when viewing the form
This field is hidden when viewing the form
This field is hidden when viewing the form
This field is hidden when viewing the form