Personal health record for iPhone

Your medical history, in your pocket — and in your control.

Conditions, surgeries, allergies, immunizations, labs and prescriptions, kept on your phone. When a doctor needs to see something, you choose what, you choose who, and you choose for how long.

  • Records stay on your device
  • Sharing expires on its own
  • Revoke any time, instantly
What it holds

Seven things a doctor always asks for.

Each one gets its own page in the app, its own color, and its own place in your timeline — so the answer to "any allergies?" takes a second, not a phone call to a clinic you left four years ago.

Medical History

Diagnoses and conditions, ongoing and resolved.

Symptoms

What the patient is feeling, how bad, and for how long.

Surgical History

Operations and procedures, with dates and surgeons.

Allergies

Drug, food and environmental allergies.

Family Medical History

Conditions that run in the family, by relative.

Immunization Record

Vaccines and boosters, with administration dates.

Prescriptions

Medications and dosages, with prescriber and status.

How sharing works

A code, not an account.

Nobody signs your records over to a network. You pick a slice, you get a code, and the doctor you hand it to reads that slice in a browser — nothing more, and not one day longer than you said.

1 · Pick the slice

Tick the categories that matter for this visit. A dermatologist does not need your family history to look at a mole.

2 · Hand over a code

The app prints something like K7M2-9QX4. Read it out at the desk, or send it. It works once, and it expires in two weeks if nobody uses it.

3 · They read it

Your doctor opens the portal in any browser — no app, no install — and sees exactly the slice you shared, laid out like your phone lays it out.

4 · You turn it off

Access ends on the date you set, or the moment you tap revoke. Revoking deletes the shared copy — it does not just hide it.

The default is off

We can't lose what we never held.

HealthKeystone is an on-device app. Your records live in your phone's own encrypted store — not in an account we keep, not in a cloud you have to trust.

The only health data that ever reaches a server is the slice you deliberately share, and it lives exactly as long as that share does. Revoke it and the copy is deleted; you still have the original, because you always did.

On the phone

Everything, all the time. Written to SwiftData on the device, behind the phone's own lock.

On the server

Only an active share, only the categories you ticked, and an access log of every time a doctor opened it.

Nowhere else

No ad networks, no data brokers, no training corpus. The business model is the $5 you pay.

Pricing

No ads, No data resale, No upsell for the feature you actually needed.

For Patients and For Clinicians

HealthKeystone

$5/month

  • Every category, unlimited entries
  • Unlimited doctors, unlimited shares
  • Full access log on every share
  • Cancel from inside the app, any time

Flat Rate priced by how many patients — not a seat fee. Speed up medical history transfer when onboarding new patients, and keep existing patients' files current.

Up to 500 patients

$50/mo

Up to 2,000 patients

$75/mo

2,000+ patients

$100/mo

What the fee buys

  • Unlimited access. No per-seat licence, no per-patient charge, no extra for the ones who share once and never come back.
  • Nothing to install, nothing to integrate. It opens in the browser on your machine. There is no rollout, no interface build, and no line item from your EHR vendor.
  • Onboarding is a code, not a project. A patient reads you eight characters at the desk and you are looking at their history — no IT ticket, no procurement, no waiting on anyone.
  • Advanced searchable list. Sorted, counted, with the shares about to expire flagged before they lapse rather than after.
  • Filter to the answer. By category, ongoing or ended, or a date window — so "what changed since I last saw you" is a click, not a scroll through six years of entries.
  • Take it into your own chart. A one-page print view and a flat CSV export, so what matters is in your record before the patient is out the door — which matters, because their access can end whenever they say.
  • Scalable. Flat tiered rates that allows you to scale with your patient base.
Questions

The ones worth answering.

Is this a medical record system?

No. It is your account of your health — what you were told, when, and by whom. It does not replace your clinic's chart, and nothing in it is a diagnosis. It exists so you can answer the intake questions accurately.

What can a doctor with a code actually see?

The categories you ticked, as of your last share. They cannot edit anything, cannot see the categories you left out, and cannot see any other share. Every time they open the chart it is written to a log you can read.

What happens when I revoke?

The share stops working immediately and the shared copy is deleted from the server — not flagged, deleted. If the doctor still has the page open, their next click is a 404.

If it's all on my phone, what if I lose it?

Your records are covered by your iPhone's own encrypted backup, the same as the rest of your device. Restoring the phone restores the app. We hold no copy to restore from — which is the trade the whole design makes on purpose.

Is it HIPAA compliant?

As a personal record you keep yourself, HealthKeystone is not a covered entity — HIPAA governs your providers, not your own notes about your own body. Clinicians using the portal are asked to confirm they'll handle what they read under the same rules as anything else in their practice.

Get started

Walk into your next appointment with the answers.

HealthKeystone is on iPhone, $5 a month, cancel whenever. A patient's code is all it takes to bring a clinician into the portal.