Books49 chapters10 h 55 min read
Health Tech
A dental office, a vet clinic and a hospital look like different businesses, and underneath they run on the same records: a patient, the people and places that treat them, appointments, encounters, coded procedures, the coverage that pays for some of it and the ledger that bills the rest. Every one of those records lives in several systems at once (a practice management system on a server in the back office, an EHR, a clearinghouse, a payer, a patient engagement platform texting reminders from the front desk), each speaking its own standard (HL7 v2, FHIR, X12, NCPDP, DICOM) and each answerable to HIPAA, the Cures Act's information blocking rules, state health privacy laws and the payer's contract. This book surveys how the industry does each piece, benchmarked across Epic, Oracle Health, athenahealth, Dentrix, Open Dental, ezyVet, Weave, NexHealth, Phreesia, Availity, Waystar, Surescripts, Medidata, Veeva and the others, with no single vendor as the model, and how you'd build it, extending one core data model chapter by chapter.
It reads in ten parts, plus a reference. The Business: the parties and how money flows, the landscape, how a practice runs, business models for health software and selling into health care. Records and Interoperability: EHR and PMS records, HL7 v2, FHIR, SMART apps, documents and images, exchange networks, patient matching and code sets. Rules of the Record: HIPAA in practice, information blocking and certification, state health privacy, consent and security. Revenue Cycle: eligibility, claims, clearinghouses, remittance, denials, prior authorization, patient financial experience, coding compliance and value-based care. Practice Management and Patient Engagement: integrating with practice management systems, scheduling and online booking, reminders and recall, phones, texting, intake, reviews, payments, membership plans, veterinary, dental and specialty practices, multi-location groups, and analytics and the AI front desk. Care Delivery: telehealth, e-prescribing, labs, referrals, hospitals, digital health and patient portals. Payers, Pharma and Clinical Trials, and Beyond the US. Running the Platform: architecture, AI, operations, metrics, migrations and data use. Reference: a glossary of every term, grouped by part.
The Business
- 01The Health Tech BusinessHow health care works in software: the parties, how the money flows, the life of a visit, and the core data model every later chapter extends.25 min
- 02The Health Tech LandscapeWho sells health software: EHR and practice management markets, patient engagement, revenue cycle, networks, telehealth, and who bought whom.11 min
- 03The Practice BusinessHow a small practice runs and earns: the front desk, production and collections, recall as revenue, DSOs and MSOs, corporate practice law and consolidators.11 min
- 04Business Models for Health SoftwareHow health software charges: per location and provider, payments, per transaction, percentage of collections, API fees, pharma-funded and consumer models.8 min
- 05Selling Software into Health CareWhat a vendor needs to sell into health care: business associate status, BAAs and their chains, HITRUST and SOC 2, reviews, state laws and the FTC breach rule.13 min
Records and Interoperability
- 06EHRs, PMSs & the Clinical RecordWhat an EHR and a PMS each hold, the problem list, meds, allergies and notes, charting by specialty, the legal record, amendments and retention by state.16 min
- 07HL7 v2 & InterfacesThe pipe-delimited messages that still run hospitals: segments, ADT, orders, results, scheduling and charges, acknowledgments, MLLP and interface engines.12 min
- 08FHIRFHIR from the integrator's side: resources and REST, search, R4 to R6, US Core and certification, Bulk Data export, Subscriptions, CDS Hooks and terminology.13 min
- 09SMART on FHIR & App PlatformsHow apps get into EHRs: SMART App Launch, v2 scopes, EHR and standalone launch, backend services, Epic and Oracle app programs, and patient access apps.10 min
- 10C-CDA, Documents & ImagesClinical documents and images: C-CDA templates, Direct secure messaging, fax and scans, DICOM, PACS and DICOMweb, and dental imaging bridges.10 min
- 11Networks & ExchangeHow records move between organizations: HIEs, eHealth Exchange, CommonWell, Carequality, TEFCA and QHINs in October 2026, query vs push, individual access.10 min
- 12Patient Matching & IdentityFinding the right patient without a national ID: MPIs, matching algorithms, the appropriations rider, duplicates and overlays, merges, and IAL2 proofing.11 min
- 13Terminologies & Code SetsThe codes inside health records: ICD-10, CPT, HCPCS, CDT, SNOMED CT, LOINC, RxNorm, NDC, CVX and taxonomy codes, licenses, release cadence, value sets and maps.13 min
Rules of the Record
- 14HIPAA in PracticeHIPAA where health software meets it: who is covered, TPO and minimum necessary, right of access, marketing, texting and email, breaches and OCR enforcement.17 min
- 15Cures Act, Information Blocking & CertificationInformation blocking under the Cures Act: actors, EHI, the ten exceptions, penalties, ONC certification, HTI-1 through HTI-5 and USCDI, as of October 2026.12 min
- 16State Health Privacy & Sensitive DataHealth privacy beyond HIPAA: consumer health data laws, California's CMIA, Part 2 for SUD records, the vacated reproductive health rule, minors and genetics.13 min
- 17Consent, Authorization & ProxiesThe consents of health care: HIPAA authorizations, consent to treat, financial and telehealth consent, Part 2, personal representatives, minors, pet owners.12 min
- 18Security for Health DataSecurity for health records: ransomware and Change Healthcare, HHS 405(d) practices and CPGs, break-the-glass, access audits, device security, downtime.11 min
Revenue Cycle
- 19The Revenue CycleHow a practice gets paid: front, middle and back end, the X12 transaction family and operating rules, the KPIs, and in-house versus outsourced RCM.14 min
- 20Eligibility & BenefitsChecking coverage before the visit: 270/271, real-time and batch, service type codes, dental frequencies and maximums, coordination of benefits, cards, portals.14 min
- 21ClaimsBilling the payer: 837P, 837I and 837D, the CMS-1500, UB-04 and ADA forms, scrubbing and NCCI edits, modifiers, attachments, acknowledgments, timely filing.15 min
- 22ClearinghousesThe switch between practices and payers: what clearinghouses do, payer IDs, EDI, ERA and EFT enrollment, pricing, APIs, dental, Change Healthcare, switching.11 min
- 23Remittance & PostingHow payer money lands: the 835 ERA, CARC, RARC and group codes, EFT and TRN reassociation, payer virtual cards and their fees, auto-posting, secondary claims.12 min
- 24Denials, Appeals & Claim StatusWhen payers say no or nothing: 276/277 claim status, denial categories, Medicare's five appeal levels, commercial appeals, audits, recoupments, underpayments.11 min
- 25Prior AuthorizationAsking the payer first: the 278, pharmacy ePA in NCPDP SCRIPT, CMS-0057-F's 2026 and 2027 dates, Da Vinci CRD, DTR and PAS, gold carding, and AI in review.11 min
- 26Patient Statements, Estimates & CollectionsThe patient's bill: responsibility after insurance, good faith estimates, price transparency, statements, payment plans, medical debt, collections.14 min
- 27Coding, Documentation & ComplianceWhat a claim may say: E/M guidelines, documentation integrity, coverage policy, compliance programs, the False Claims Act, Anti-Kickback and Stark.11 min
- 28Value-Based Care & QualityPaying for outcomes: MIPS, APMs, the Shared Savings Program, ACO REACH and LEAD, Medicare Advantage, risk adjustment, HEDIS and eCQMs, and what to capture.11 min
Practice Management and Patient Engagement
- 29Integrating with Practice Management SystemsReading and writing a practice's PMS: sync agents on the office server, vendor APIs and partner programs, write-back, fees, gatekeeping, drift and conflicts.20 min
- 30Scheduling & Online BookingHow a practice schedule works: providers, operatories, appointment types and patterns, blocks, slot search, online booking, insurance at booking, ASAP lists.15 min
- 31Reminders, Confirmations & RecallConfirmations and reminder cadences, the evidence, no-show measurement, hygiene recall, vaccine and optical reminders, reactivation and unscheduled treatment.15 min
- 32Phones for PracticesThe practice phone system: VoIP for small offices, call pop from the PMS, routing and hours, missed-call text-back, 911 duties, recording consent, analytics.13 min
- 33Two-Way Texting & MessagingPractices texting patients: the practice number, registration, the TCPA health care exemption, STOP, HIPAA and texting, portals versus SMS, email, the inbox.15 min
- 34Digital Intake, Forms & ConsentIntake packets, medical history, insurance cards and ID, e-signature and consent, writing forms back to the PMS, tablets and kiosks, accessibility, language.12 min
- 35Reviews & ReputationPractice reviews: asking every patient, gating and private feedback, the FTC review rule, replies without PHI, gag clauses, listings and directories.11 min
Care Delivery
- 36TelehealthVideo, audio-only and asynchronous visits, remote monitoring codes, Medicare telehealth status as of October 2026, licensure compacts and DTC enforcement.16 min
- 37E-Prescribing & PharmacyNCPDP SCRIPT and Surescripts, EPCS under DEA and CMS rules, PDMPs, DEA telemedicine prescribing status, pharmacy claims, embedded eRx and compounding.14 min
- 38Labs, Imaging & DiagnosticsLab and imaging orders and results, CLIA and its report rules, Labcorp and Quest connectivity, at-home testing, critical values and results release under Cures.13 min
- 39Referrals & Care CoordinationReferral management and closed loops, the fax that still carries them, Direct messaging, discharge and ADT notifications, care management codes and post-acute.11 min
- 40Hospitals & Health SystemsInpatient versus ambulatory, ADT and bed management, the Epic-centered enterprise, Conditions of Participation, EMTALA, 340B, price transparency, selling in.14 min
- 41Digital Health Apps & DevicesWellness or device, FDA software rules and the 2026 CDS and wellness guidance, wearable and phone health data, the FTC breach rule and digital therapeutics.13 min
- 42Patient Portals & Patient Access AppsPortals and proxy access, payer Patient Access APIs, certified APIs and phone records, open notes, results release and portal messages billed as e-visits.13 min
Running the Platform
- 43Health Tech Architecture: Building It YourselfTenancy by practice and group, PHI segmentation, the sync and integration layer, events, a FHIR facade over your model, audit everywhere and a reference build.17 min
- 44AI in Health TechAmbient scribes, coding and prior auth AI, patient-facing chat, decision support transparency, FDA device rules, state AI laws and LLMs with PHI under a BAA.14 min
- 45Operations, Support & DowntimeSupport access to PHI, downtime and incident notices to practices, uptime and dependencies, on-call, breach clocks, and correcting data in clinical records.12 min
- 46Health Tech MetricsPractice, revenue cycle, engagement and vendor metrics defined: locations, NRR and GRR, revenue per client, days in A/R, no-shows, and how each gets miscounted.9 min
- 47Data Migration & ConversionsPMS and EHR conversions: what moves (ledgers, insurance, images, notes), EHI export, legal retention after switching, archives, and the cutover weekend.12 min
- 48De-identification, Research & Data UseSafe Harbor and Expert Determination in practice, limited data sets and DUAs, tokenized linkage, research and IRBs, sale of PHI, and FTC and state law.12 min