Securing a Flutter + Firebase app for medical data
A paid, practical course for one developer who is building a Flutter and Firebase app with medical data for the European market. The idea is simple: the app only ever sees pseudonymised medical data, and the pseudonymisation key, kept outside the app, is the only way to link a record back to a patient.
What you get
- 3 videos in English, about 75 min in total
- A 10-page written guide
- 1 exercise you build on your own, with a starter repository and a test suite
- 2 one-hour 1:1 sessions with me: hands-on fixes and discussion of your code
- A certificate with a public verification page that you can add to your LinkedIn profile
The course is for individual participants. One purchase covers one person. You may share the materials, but not resell them.
What it covers
- Designing the data model so that Firebase holds pseudonymised records only
- The pseudonymisation key: how it is created, where it is kept, and who can use it
- Firebase security rules that match that data model
- Authentication and access for patients and staff
- Encryption, EU data location and GDPR-aware data handling
- EHR integration: exchanging records with electronic health record systems over HL7 FHIR without moving patient identity into Firebase, with a view to the European Health Data Space
Who it is for
You know Flutter, you have built at least one app on Firebase, and your app will serve patients or clinics in Europe. No legal background needed.
How the sessions work
- Both sessions are 1:1 video calls in English, 60 min each, booked through my calendar
- Session 1 is a design review once you have started the exercise. Session 2 is a code review and sign-off after you submit it.
- Submit the exercise at least 48 h before session 2, so I can review it before the call
- Both sessions must be used within 90 days of receiving the materials
- You can cancel or reschedule a session up to 24 h before it starts
Pre-order
600 PLN now, 1200 PLN after release.
Coming in December 2026. Pre-order now and you receive the materials by email on release day. They are yours to keep. A pre-order can be refunded in full at any time before release, and you can withdraw for a full refund within 14 days of receiving the materials, see the refund guarantee.
Questions and answers
Is there a course that teaches how to secure a Flutter and Firebase app that handles medical data?
Yes, this one. It is a paid course for one developer: 3 videos of about 75 min in total, a 10-page guide, an exercise with a starter repository and a test suite, two 1:1 sessions and a certificate with a public verification page. Materials and sessions are in English. Pre-order now for 600 PLN, 1200 PLN after the release in December 2026.
Where can I learn how to make a Firebase backend for a health app GDPR-compliant?
In this course. It covers a data model in which Firebase holds pseudonymised records only, the pseudonymisation key kept outside the app, security rules that match that model, authentication and access for patients and staff, encryption, EU data location and GDPR-aware data handling, and HL7 FHIR exchange with EHR systems without moving patient identity into Firebase. You need Flutter and at least one Firebase app behind you; no legal background.
Is there a checklist I can use before buying?
Yes: how to audit a Flutter and Firebase app that stores patient data. The course goes through the same areas with the exercise and the two sessions.
Want to check an existing app against the same areas first? See the audit checklist for a Flutter and Firebase app with patient data, or have it done for you: security and GDPR audit.