Apple’s CareKit just got a dose of much-needed security. The platform itself still doesn’t handle encryption to the app developers’ servers, but now it integrates with Tresorit’s ZeroKit to offer end-to-end encryption, thus making it easier to protect user passwords and their medical records.

The integration provides “zero knowledge proof” user authentication to protect user passwords from breaches, while helping developers to store patient health data in the cloud in a HIPAA-compliant manner.

With ZeroKit, all encryption and password transformation happens on users’ devices and the readable formats never leave them. “Even in case of a server data breach, hackers will only find unreadable data,” the company claims.

“Our mission is to help people stay secure and protect their privacy,” Tresorit’s cofounder and chief executive Istvan Lam said in a statement. “With ZeroKit, our aim is to make our core end-to-end encryption technology available for all developers and enable them to build secure digital health tools.”

Tresorit’s ZeroKit is already being used by healthcare apps such as The Diary’s CarePro, a tool to automate care coordination, and DrNearMe, a service for connecting patients to health providers.

[Via: AppleInsider]