Platform · 02 · The connective tissue

One loop, every arrow consented

The loop end to end: what you put in, who can see it, what comes back, and which parts are built.

The patient is the only one who sees the whole journey. Each hand-off below is a gate the database enforces, not a promise the app remembers. Three stations, one direction — and what the commons learns comes back as group figures.

Patient

Lives the record — symptoms in five words, labs, medications, the household. Owns every key.

Gate: nothing leaves until a switch is on; the database writes each change itself.
works today

Provider

Sees what one patient shares — both locks open: the patient has shared their record with them and their sharing with clinicians is on. Revocable on the next page load.

Gate: consent + care relationship · every read audited.
works today

Researcher

Sees patterns of five or more — never a record, never a name. Industry is a separate account type, labelled everywhere.

Gate: opt-in · k ≥ 5 · ethics-reviewed export.
works today
The loop closes. Group figures flow back to the patients who made them possible — figures only, never a comparison between treatments, never a number about you, and nothing is pushed to you.

03 · The data story

Consent is a gate, not a promise

Every sharing switch starts off, and none is asked for at signup — they are on the consent page in your account. With one on and the rest off, only that channel carries anything outward. The database decides row by row what any request may see; switching one off closes its channel on the very next request. A few more are decided where the feature is offered, beside the thing they govern — never up front, for something the account cannot use yet.

  • Every sharing choice starts off — and all-off is a complete answer, never nagged.
  • Your consent history is written by the database itself. App code cannot skip or rewrite it.
  • Revoke, and it is gone on the provider’s very next page load — proven on a live session, not promised.
  • Researchers see groups of five or more, never records — enforced where it cannot be forgotten.
Your data, your rules →

Where the signal comes from

Your tracked recordworks today
Symptoms, medications, labs — recorded by living your care, shared only where you allow.
The household veterinary sentinelworks today
A dog’s positive tick test quietly warns its household — framed as where ticks are, never what anyone has.
CDC Lyme surveillanceworks today
Three decades of public surveillance, pulled under fixed published controls and shown with its counting rules drawn in.
Your own Medicare claimsblocked upstream
Built to the CMS boundary. What the insurer paid arrives as a claim, never as sharing.
A file from your patient portalworks today
A C-CDA document or a FHIR JSON bundle you download from a portal is read into pending lab reports for you to check and confirm one at a time. Only final laboratory reports are read. Imports are not sharing.
Your patient portal, connected directlydesigned, not built
Signing in to a portal from here and pulling records with no file in between: patient-directed, over FHIR, into your own record. Imports are not sharing.

What is built, and what is not

You can use this todayThe tick-bite workflow · The tick-bite calendar reminder — a file made on your device · Guided setup — your basics, records, first check-in, costs and care team, then what you share · Timeline, check-in, daily log · Too unwell to record — a reason for an empty day · Your progress — the month counted in your own words · Findings on the body, on the timeline · Visits, in your own words · Where you were · The cost-of-illness ledger · The diagnostic odyssey, with the exposure overlay · The clinician read page · Pre-visit delta — what changed since last visit · Print the whole record — one paginated document · Quick mode — one question on the days the dashboard is too much · The insurance fight kit — the appeal packet, assembled from your record · The consent ledger and receipts · Add a lab report — your document kept, the values typed by you or read from a portal file · Lab results — your panels, the bands that changed, and each band over time · Medications — a record, not an engine · Pre-visit brief, patient and provider sides · Beacon — talks through your own record, off until you switch it on · Findings returned, with suppression shown · Household record and the pet sentinel · Export everything · Who you shared with, in the export — FHIR R4 Consent · Delete your account · Shared with me, scoped to what was granted · Provider verification and directory · Cohort counts, k of at least five enforced before display · The research access queue — an administrator’s verdict is what the export checks · CDC tickborne surveillance, 1992 to 2023 · Lyme disease by county on the Lyme Map · The element set and codebook · The recovery archive — if something changed, in your words · Tell it once, and the waiting-room state · The clinical reasoning record · The protocol library — reasoning and citations, versioned · Two cohorts compared over time.
Preview — a page, nothing behind itClaiming a directory listing · Provider plan and billing · The caregiver seat — observations under your own name, never as the patient · The veterinary-practice seat — every dog a sensor, results by block group · The health-official seat — block-group aggregates under a data-sharing agreement · The town-organiser seat — a Tick Offensive’s orders, roster and cash, never a record · The volunteer seat — a shift, a street, a phone tree · The admin seat’s dashboard — every queue and job, worst first · The Access Fund — the public page and the rules · Ask the fund · The fund committee — a blind read by three of five · Give to the fund · Fund admin — payouts, reconciliation and the close, never an award · The red-flag card and its escalation · The Research Priority Commons · The recruitment bridge · Property defense — the yard measured, not managed.
Designed — not built yetLogging a day you missed · A state you set — flare, steady, remission · The nine check-in words with no place in the record · The energy envelope — where the day’s energy went · A photo on the check-in — a rash, a tick, a joint · Calling a word what you call it · Who has ever seen each part of the record — the ledger turned around · Journal highlights for a clinician · What a check covered, facet by facet, with its own date and expiry · The integrative guide inside your account · The molecular record — organism by organism, assay and window · My protocol — what you take and when, as a daily page · A page of its own for each pet’s sentinel record · Inviting a caregiver to part of your record · Lyme news, local first · The audit log, readable by an administrator · Search this area — the map as a live filter · Patient portal import · The Tick Offensive — landing, town page, tracker · Organiser and volunteer coordination · A published post-season result for every town · Beacon reading a tick photo · First sign-in — one question, once per account · A narrated pre-visit brief, edited by you · A dated changelog of what changed on the site · Outcome capture on the pre-visit delta — a clinician’s three taps · Beacon on the public guides — a reading aid for a stranger · A fourth review state — published without clinical sign-off · A phone’s health app — steps, sleep and resting heart rate · A watch or a band — steps, sleep and resting heart rate · A smart ring — steps, sleep and resting heart rate.
Not built, by decisionA wellness score, a streak, or any number that grades you · Drug-interaction checking · Any risk score or probability about a person · Ratings and reviews of clinicians · Any export that could identify a person · Benchmarking clinicians against each other · Regimen composition — doses, durations, stop criteria · NHANES as a population baseline · CURE ID as a source · Paid placement changing a grade or an order · Dosing guidance on a product page · Ranking towns or households against each other · Application instructions for any pesticide.

Everything on this page runs on invented data in the demo. This is a working preview, not a launch. The graded list, with a proof for every row, is the register.

Where to go next