DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

NHS Health Apps Library closing amid questions about app security & quality: what can we learn?

Posted on October 17, 2015 by Dissent

Satish Misra, M.D. writes:

The United Kingdom’s National Health Service (NHS) launched the Health Apps Library as part of their NHS Choices program in 2013. It was pitched as a pilot program, one that would guide patients and clinicians to safe, effective health apps. And now after a troubled two years, the NHS Health Apps Library is shutting down later this week.

The Health Apps Library has had a run of challenges and critiques. Earlier this year, a privacy advocacy group raised concerns about the screening of nearly half of the 200+ apps included. In particular, they highlighted concerns about the security standards of many apps.

That security concern was further validated in a recent study from the Imperial College London. In this study, researchers tested 79 apps using dummy data. They found that none of the apps encrypted data on the device (including PHI). Of the 35 apps that sent identifying information via the Internet, two thirds did not use any encryption. And four apps sent PHI without any encryption.

And that’s in addition to concerns about whether the apps are actually effective.

Read more on iMedicalApps.

Category: Commentaries and AnalysesHealth DataNon-U.S.

Post navigation

← UK: York school admits data breach after unprotected memory stick is lost
2 Manitoba nurses fined $1K each for breaching patient privacy →

1 thought on “NHS Health Apps Library closing amid questions about app security & quality: what can we learn?”

  1. IA Eng says:
    October 19, 2015 at 7:37 am

    Another take the money and run opportunity. Who ever made and whoever approved the apps should be held accountable. But its probably too late for any of that. It just goes to show people that any business will not protect your privacy as it should. I think if some one with a legal background would look over the EULA (if there is such a beast) that maybe these irresponsible people can be held accountable for their failures. Obviously no one BETA tested this stuff. A sad day in technology when people who make this crappy products cannot think far enough in advance to include protection of PII / PHI

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Ex-NSA bad-guy hunter listened to Scattered Spider’s fake help-desk calls: ‘Those guys are good’
  • Former Sussex Police officer facing trial for rape charged with 18 further offences relating to computer misuse
  • Beach mansion, Benz and Bitcoin worth $4.5m seized from League of Legends hacker Shane Stephen Duffy
  • Fresno County fell victim to $1.6M phishing scam in 2020. One suspected has been arrested, another has been indicted.
  • Ransomware Attack on ADP Partner Exposes Broadcom Employee Data
  • Anne Arundel ransomware attack compromised confidential health data, county says
  • Australian national known as “DR32” sentenced in U.S. federal court
  • Alabama Man Sentenced to 14 Months in Connection with Securities and Exchange Commission X Hack that Spiked Bitcoin Prices
  • Japan enacts new Active Cyberdefense Law allowing for offensive cyber operations
  • Breachforums Boss “Pompompurin” to Pay $700k in Healthcare Breach

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Massachusetts Senate Committee Approves Robust Comprehensive Privacy Law
  • Montana Becomes First State to Close the Law Enforcement Data Broker Loophole
  • Privacy enforcement under Andrew Ferguson’s FTC
  • “We would be less confidential than Google” – Proton threatens to quit Switzerland over new surveillance law
  • CFPB Quietly Kills Rule to Shield Americans From Data Brokers
  • South Korea fines Temu for data protection violations
  • The BR Privacy & Security Download: May 2025

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.