IOS Deployment Issue (Approval)

[Robin_123]

In iOS when we deploy our application using Fitbit API, it's saying that please share the proof that FitBit is authorized to take Heart Rate information from patient.

Please help me out as how we can have this doc which states that Fitbit is legally authorized to manage the heart rate information of a customer

[Gondwana · Accepted solution]

Are you using the SDK (eg, device API) or Web API?

[Robin_123]

I am using Web API.

[Gondwana]

Gotcha. This forum will probably get you better responses. Re "it's saying", it might be helpful if you could clarify exactly what program/app/site is saying that.

[Robin_123]

*This issue given by App Store.*

For application to be live on app store, need the below authorized
documentations and complete app description along with disclaimer, as all
the documents are required to make the application live on IOS.



We get the below response from app store:-



Our app connects to external medical hardware to provide medical services.
However, to be compliant with App Store Review Guideline 1.4.1, you must:



1. Provide documentation from the appropriate regulatory
organization demonstrating regulatory clearance for the medical hardware
used by your app.



2. Provide documentation of a report or peer-reviewed study that
demonstrates your app’s use of medical hardware works as described.



3. Restrict the salable storefronts you select in App Store Connect
to the regions where you have obtained regulatory clearance for the medical
hardware used by your app. Otherwise, you must provide a jurisdiction
statement in your app description declaring where the medical hardware has
regulatory clearance to be used.



4. Update your app's description to include a disclaimer reminding
users to seek a doctor’s advice in addition to using this app and before
making any medical decisions.



Please provide all the related documents so that we can submit the request.

[Gordon-C]

Hi @Robin_123 

Can you describe to me what your application does?   Is it used for medical research?   Also, do you have a Terms of Service and Privacy Policy that explains the reason for collecting the Fitbit data and how it is being used?   Because, the request posted by Apple doesn't specifically state that Fitbit needs to provide you this information.   Instead, it sounds like they are asking for information from an IRB review board.   And, it sounds like they think Fitbit is a medical device when it is actually a fitness tracker.

Gordon

[Robin_123]

Hello Gordon,
Greetings for the day!

I'm building a healthcare application to track the Anxiety, Depression of a
person by calculating heart rate and SPO2 level of the person using Smart
Watch(Fitbit). by using your API we are collecting the vitals and sending
them to our mobile application.
When the user heart rate or SPO2 level fluctuates from the normal range of
the user then mobile application sound alert gives a notification and plays
a video to calm down the user.
And we are also sharing the user vitals to the doctors so that doctors can
also monitor the patient's health. That's why I chose the
healthcare category while publishing my application on the App store
We need a legal document of your smart watch so that Apple can verify that
your device is user safe.

The main objective of this application is to prevent the Anxiety attacks
and Sucide case.

Privacy and Policy : https://diraclinks.com/privacy_and_policy

Thanks & Regards
Robin.

[Robin_123]

Hello Gordon,
Greetings for the day!
Please give me solution ASAP.

[Gordon-C]

Hi @Robin_123 

Did you describe the Fitbit device to Apple as "external medical hardware to provide medical services."?   If so, that might be where the issue is.  Our device is not medical hardware.  It is a consumer activity tracker.  I have not heard that we have have submitted our "device" to a regulatory organization to be cleared as medical hardware.   We have submitted some algorithms to the FDA for approval, but that different.  You can read about our FDA approved features here: https://healthsolutions.fitbit.com/providers/.

If you did describe the Fitbit devices as "external medical hardware", then you will need to correct your description with Apple.

Gordon

[Robin_123]

Hello Gordon,
Greetings for the day!

Can you please provide sample code for PHP Web API because I am not getting access_token properly  via web API.

[Gordon-C]

Hi @Robin_123 

The only sample code I have is in our documentation: https://dev.fitbit.com/build/reference/web-api/developer-guide/libraries-and-sample-code/#Sample-Cod....   You could try some internet searches to see if you can find others.  Searching google for "php fitbit code" a bunch were returned.

Gordon

[Robin_123]

Hello Team,

Have a nice day!!

Lastly, how can we create the capability to connect to lights (Other IOT)? Are we considering via Fitbit watch? Please let me know

[Robin_123]

Hi Team,

I have some queries related to API access: -

1.  I need to know that in fitbit which API is free or which we need to pay or enable the permission of access?
2. When I hit the API for SPO2 it show me error " API client is not authorized by Fitbit to access the resource requested. Visit https://dev.fitbit.com/docs/oauth2 for more information on the Fitbit Web API authorization process ", please provide the solution for this error?
3. For get the actual HR and spO2 which API I need to use because in every API you guy's have 4 type of uses, please clarify me that which API I use if I want latest data of HR and spO2?

[Gordon-C]

Can you describe what IOT support are you looking for out of Fitbit?   Are you looking for the lights to turn on/off when you reach a fitness goal, or just the ability to adjust a light on the device?

[Gordon-C]

1. The Fitbit Web API and Device SDK are public APIs and free to use.
2. There could be several reason for the error you are receiving when querying the SpO2 endpoint.   It could be the appropriate scope has not been enabled, or a syntax issue.   Can you provide more information on your configuration?
   1. What is your application setting (e.g. client, server, personal)?
   2. What is the endpoint syntax that you are using?
   3. Did the user enable the SpO2 scope during consent?  This can be verified by using the introspect endpoint against the access token.
   4. Have you confirmed SpO2 data exists in the user's account?
3. We provide several endpoints to give flexibility in how to query the data.   For HR and SpO2, are you looking for daily summary values or more granular data for a single date?  Are you looking for a single days worth of data or over a period of time?