Multi-step patient intake for a regulated provider network
A HIPAA-aware, multi-step patient intake and subscription flow for a provider network: medical questionnaires, consent, and payment authorised at signup but held until a provider confirms eligibility.
The problem
A regulated product cannot just take a card and ship. A patient has to answer medical questions, consent to treatment, and be cleared by an actual provider. Charge before that clearance and you owe refunds. Charge after it and you lose people in the gap.
What I built
A multi-step intake covering the medical questionnaire and consent, then a subscription authorised at signup and held, not captured, until a provider confirms the patient is eligible. Cleared, it captures. Declined, it never charged in the first place.
Handling the data properly
Patient data moves under signed BAAs, with the health answers kept out of the analytics and marketing pipes entirely. Tracking sees that a step completed, not what a patient answered.
Built to be left alone
No clever infrastructure only I could operate. The failure modes are boring on purpose: retries where a webhook can be missed, plain records where a person may have to reconcile by hand.
Where it landed
Still live, still taking patients, long after the engagement closed.
Built to outlast the contract, and it did
Building something on the same path? Email hello@emregnd.com, or read the next one: Telehealth group, three brands.