Hacker News new | ask | show | jobs
by probably_wrong 304 days ago
Here's some honest and brutal feedback:

First, this service is breaking enough European data privacy rules that you should seriously consider blocking European visitors altogether (who's your GDPR Data Protection Officer? How do I get in touch with them?). On that vein:

> We use enterprise-grade encryption for all data and follow strict privacy protocols. Your information is never sold or shared

No information on what those privacy protocols are, though. And unless you're self-hosting the entire stack, are you really sure you're not sharing my private information with, say, OpenAI?

At a more general level, speech recognition and LLM performance outside English ranges from "it's okay" to "bad". If you're offering a service in a language that you don't speak (and forgive me for doubting your ability to speak Korean, Vietnamese, Russian, Hindi, Telugu, Bengali, and several more), be prepared for things to go wrong in ways you cannot understand. And speaking of which, how big is your "support team"? You wouldn't write "team" to mean just a single person, right?

> During your conversation with the officer, Maya stays on the line taking detailed notes about next steps, required documents, deadlines, and contact information so nothing gets lost.

I hope you're checking that you're in a one-party consent state. I also hope you've accounted for the person saying "I do not consent to be recorded".

At an even more general level: the problem with this idea is that it's aimed at the "average" person, but everyone has different pain points and your app will probably break up in contact with them. I can imagine it works well for your family because you know them, but are you sure it will work with mine? And you're aiming it at a sector of the population that, by definition, is bad with technology. That's a tough sell.

Anything related to healthcare can be a minefield. I wouldn't walk in there unprepared.

1 comments

The more I read about healthcare regulations, I feel like I should just keep it as a tool for my parents and family. It does seem like a minefield of potential penalties albeit set up for the right intention but it keeps small players out.
Honestly, the big play here is to partner with someone that has that knowledge already.

So, the other end of the spectrum, doctors offices, insurance agents, etc.

These people have to already make reminder calls/emails etc, and they can get the consents needed.

That said, you probably have a gap between what you are doing now and what they require, which you need a case study to fill in.