> Health is inherently social
Maybe wellness is inherently social. I am a huge fan of Strava.
But there is no way I would give three guys in Oakland access to my medical records.
Maybe wellness is inherently social. I am a huge fan of Strava.
But there is no way I would give three guys in Oakland access to my medical records.
I know a lot of people who upload their scanned prescriptions and reports to Dropbox. Dropbox uses AWS S3 to store data.
Do the 3 guys from Oakland use the same infrastructure? I'm not sure. But Dropbox has access to your files.
I can't say you're someone who uploads medical data to cloud storage, so this is a more general question (since I'm sure more people will have these qualms): Why Dropbox and not Prime? Is it Guido? Drew? Those guys are from the Netherlands and Massachusetts respectively.
If there's a security concern, the NSA (and I'm sure other agencies) pretty much have access to everything, and those employees might just be a couple of guys from Oakland.
Note: This is something I can see as a valid concern from a lot of people, so this question is as much directed to the Prime team as it is to Steve.
Update: I wrote Oklahoma instead of Oakland everywhere.
Update 2: They _do_ use Amazon.
Some more background on us: I worked at Disqus for 3 years. I spent time on the Product team and helped engineer some of their tools too. Owen is a fantastic engineer who spent 4 years at Intel and Oracle before that. We know security, we know scale. We're fully HIPAA-compliant; we even worked with Amazon directly to ensure this. Everything is encrypted and no data is stored on the device.
What could we do differently to put your mind at ease about this? Are there specific technical points you have in mind?
This is a problem that desperately needs to be solved and we're solving it for the people who need it solved most: people who really need their real health records with them right now, whether to show at their next doctor appointment or to family at home or friends on the other side of the country.
Thanks for your thoughts.
"AWS enables covered entities and their business associates subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA) to leverage the secure AWS environment to process, maintain, and store protected health information and AWS will be signing business associate agreements with such customers."