Navigating Digital Health: The New IEEE Standard for Medical Mobile Apps

For millions of patients managing conditions ranging from depression to chronic pain, mobile applications have become essential health tools. However, the rapid proliferation of over 55,000 medically classified apps has outpaced the ability of traditional regulatory bodies to keep them in check. Many users may mistakenly assume these tools have undergone rigorous independent vetting for safety, efficacy, and ethical design, but this is often not the case.

To address this critical transparency gap, the IEEE Standards Association has launched the IEEE Global Medical Mobile App Assessment and Registry. This new initiative provides a public, searchable directory of therapeutic apps that have met a consensus-based framework for clinical and technical excellence.

The Regulatory Gray Zone

Medical mobile apps frequently fall under the designation of Software as a Medical Device (SaMD). While public health agencies like the U.S. Food and Drug Administration (FDA) have oversight, the sheer volume and speed of app development have created a significant regulatory gap. According to Yuri Quintana, chair of the assessment and registry program and chief of the clinical informatics division at Beth Israel Deaconess Medical Center, this has left a “large gray zone” of apps that are clinically relevant but have never undergone independent assessment.

This environment allows for deceptive marketing, where companies may imply their apps have been vetted or clinically proven when they haven’t. Even when an original version of an app receives regulatory approval, subsequent updates—which can include significant changes to functionality—often remain unvetted, according to Maria Palombini, IEEE SA’s director of health care and life sciences global practice lead.

How the Registry Establishes Trust

The IEEE registry aims to provide a clear signal to clinicians, patients, and payers by evaluating apps against a rigorous framework developed by a multidisciplinary group of 35 experts from 10 countries. This group includes clinicians, researchers, AI experts, ethicists, and patient advocates.

Apps listed in the registry must undergo a three-tier evaluation across approximately 150 criteria categorized into three pillars:

• Clinical Efficacy: Evidence of actual clinical benefit, therapeutic effectiveness, risk management, and real-world value compared to standard care.
• Technical Soundness: Evaluation of data privacy and security, interoperability, AI governance, usability, and operational quality.
• Ethical Design: Standards for bias prevention, patient consent, data governance, conflict-of-interest transparency, and the responsible use of AI and large language models.

To be included in the registry, apps must achieve at least 85% compliance in each of these three categories. The process, which takes approximately six to eight weeks, requires developers to provide documentation and attestations. Once approved, apps receive an IEEE certification badge and a unique identifier, providing a visible mark of trust for users.

Key Takeaways for Stakeholders

• Voluntary Certification: The registry is a voluntary program; there is no government mandate for developers to participate.
• Ongoing Maintenance: Approval is not a one-time event. Developers must submit updated versions of their apps for reassessment to ensure continued compliance.
• Transparency: Approved apps receive a unique identifier, and the registry itself is publicly accessible at no cost, helping patients and insurers distinguish between well-marketed apps and those with proven clinical value.
• Focus on Mental Health: While the registry accepts apps across various fields—including cardiology, oncology, and neurology—the initial focus is on mental health applications.

Looking Ahead

As digital health continues to evolve, the need for standardized guardrails becomes increasingly urgent. By leveraging the IEEE’s history of developing global technical standards, the registry seeks to harmonize how we measure the safety and efficacy of the software we rely on for our well-being. For developers, clinicians, and patients alike, this initiative represents a significant step toward a more transparent, evidence-based digital health landscape.

For those interested in the technical foundation of this program, the assessment framework supports the development of the IEEE P3962 Standard for Criteria Assessment Framework for Medical Mobile Health Applications.