Two things happened on September 9, hours apart. Apple put a blood test inside the Health app: more than fifty biomarkers, 119 dollars, ordered and paid for on a phone. And the Federal Trade Commission took down the page that told health apps they owe people notice when their data leaks. One moves clinical work into consumer software. The other makes the rules over consumer software harder to find. Here is what each one means for a practitioner nobody has written a rule for.
Signal 1
Apple Put a Blood Test Inside the Health App, and a Doctor You Never Meet Signs the Order
Apple showed a rebuilt Health app at its September event on the ninth, alongside the Apple Watch Series 12 and Ultra 4. The app now runs on Apple Intelligence. It adds a readiness score, personalized guidance, and a number called Health Age, which compares a set of measurements against a person's actual age and reports the gap. Health Age is built from VO2 max, resting heart rate, heart rate variability, sleep, and blood work.
That last input is what is new. Quest Diagnostics announced the same day that Apple Health users in the United States will be able to buy a Quest panel of more than fifty biomarkers from inside the app, on iPhone and iPad, later this year, for 119 dollars. The panel covers cardiometabolic health and organ function, and adds blood pressure, height, weight, and waist and hip measurements. The blood draw happens at one of roughly two thousand Quest locations and the results come back into the app.
Two sentences in the Quest release matter more than the rest. Quest works with third-party providers who review and approve every test order, and those providers will discuss results and next steps if the user asks, at no extra charge. The service will not be available in every state. Quest's consumer general manager said the arrangement will help bridge the gap between clinical and consumer health.
Sources: Quest Diagnostics news release, September 9, 2026 | TechCrunch, September 9, 2026
What this means for you
Here is the part to hold onto. A doctor still signs that lab order. Quest says third-party providers review and approve every one of them. But that doctor has never met your client, has not heard their history, and is approving a panel they picked off a menu. The approval is real, and it is also a step in a checkout.
Which brings the useful question. A blood panel ordered because someone has a symptom is looking for something. A panel bought off a screen is looking for anything. Those are different tests even when the paperwork is identical, and the second kind usually comes back normal.
That is what walks into your session. A client holding fifty numbers and a question you did not get to shape. Normal is not an answer to why they cannot get through the afternoon. You will be the first person in the whole transaction who asks how they sleep, and nobody has written a rule about what you are allowed to say next.
Signal 2
The FTC Took Down the Page Telling Health Apps They Owe You Notice When Your Data Leaks
The Federal Trade Commission announced on September 9 that it has rescinded a policy statement from 2021. That statement said the Commission's Health Breach Notification Rule covers health apps and connected devices that collect health information: the period tracker, the sleep app, the fitness band, anything sold straight to a person rather than through a clinic. These are the products HIPAA does not reach.
The Commission's reason is that the statement is no longer needed. In 2024 it rewrote the Rule itself to cover health apps and connected devices such as fitness trackers, so in the Commission's account the 2021 reading is already in the text. The announcement places the move inside a wider effort, citing an executive order telling agencies to remove obsolete guidance, and the Commission's own preference for using less subregulatory guidance.
So what came down is an explanation, not a rule. The American Hospital Association reported it the next day and described it the same way.
Sources: FTC press release, September 9, 2026 | American Hospital Association, September 10, 2026
What this means for you
Start with what did not change, because that is the part you can use. The Rule is still law. A health app that leaks your client's data still has to tell them, and if it does not, that is still reportable to the FTC at ReportFraud.ftc.gov. Anyone can file. You do not need a lawyer and you do not need to be the person harmed.
Now the part that did change. What the FTC took down was the plain-English page explaining that the Rule reaches consumer apps. The rule survives. The explanation does not. For a hospital with counsel that is a footnote. For a practice of one it is the whole thing, because a protection you cannot find is a protection you cannot use, and nobody is sending you a memo.
Notice the timing more than the legal argument. In the same week a blood test moved inside a consumer app, the clearest public statement of what those apps owe people got quieter. More health data is going into products HIPAA never covered. You are very likely the only person your client will speak to this year who knows that reporting channel exists.
The Pattern
Two announcements, one day, pulling opposite ways. Apple and Quest moved blood work into a consumer app and folded the doctor's approval into the purchase. The FTC took down its plainest public explanation of what a consumer app owes someone when it leaks their data.
Put them together and the shape is simple. Things that used to require a practitioner are moving into apps. The rules that used to cover those apps are getting harder to read. Both are happening to the same person at the same time, and they are the one holding the phone.
That line between medical and wellness was quietly doing real work. It decided who could order a test, who was qualified to read it, and which law followed the results afterward. It is being crossed from one side and thinned from the other, and nothing is replacing it.
What is left in the gap is you. The panel gets bought, an app explains it, the approving doctor never meets anyone, and the next human being your client asks is a practitioner nobody has written a rule for.
One Thing You Can Do This Week
Write down the sentence you will say the first time a client hands you a panel nobody ordered for a reason. One sentence, true, and short enough to say out loud without sounding like you are covering yourself.
Something close to this: I can look at this with you and tell you what I notice. Reading lab results is not my lane, so if anything here is out of range we take it to someone whose lane it is.
Then write the harder half. What you say when nothing is out of range and they are still tired. That is the session you are actually going to have, because a panel bought without a question behind it usually comes back unremarkable, and unremarkable is not an answer.
Say both out loud once before the week starts. Do it now rather than in the room. In the room there will be a screen full of numbers, a Health Age that upset them, and a person who paid 119 dollars and still does not know why they are tired. Deciding your line while they watch your face is how a practitioner ends up saying more than they meant to.