#api-platform

v2 PRD, Part 2 — applications, data model, cloud

“An entity model is a contract with your future self. Get it wrong and every feature spends the next five years paying interest on the mistake.”

Two years on medical IoT — the platform retrospective

“The connected health portfolio was where I learned that 'API team' and 'IoT team' are two names for the same job. The hardware ships once. The platform supports it forever.”

Where hardware specs meet API contracts — the room

“The hardware team ships every 18 months. The API team ships every two weeks. The capabilities the device announces are the only bridge between those two clocks — they're what lets the fast side move without breaking the slow side in the field.”

OTA firmware over Bluetooth — pushing the ROM through the phone

“A brick in the field is a support call, a warranty replacement, and a one-star review. We've shipped about a million units. The math on getting OTA wrong is not subtle — so the device assumes every transfer will be interrupted and every image might be hostile, and is only surprised when it isn't.”

Phone-as-gateway — the auth model for BLE-only devices

“Bonding gives you trust between two specific physical objects. OAuth gives you trust between a human and a cloud. The device touches neither directly — and the only thing standing in the gap is a phone you have no reason to trust.”

From eight device APIs to one entity domain model

“Eight APIs with eight definitions of 'user' aren't a portfolio. They're a billing engineer's nightmare. Consolidation isn't an aesthetic preference.”

HIPAA, FDA Class I, and what counts as medical-device data

“A brushing session by itself is product analytics. The same session tagged with a name, a birthday, and a dentist's email is protected health information. Nothing about the bytes changed — what changed is what they're now attached to, and that is the whole job.”

Designing a connected health device with BLE 4.2

“A BLE device with no WiFi is a phone-shaped product. Every connected feature pivots through the customer's iPhone, including the ones the customer never asked to participate in.”