Definition
Patient Portal Centric
A product architecture in which the patient — not the institution — owns, controls, and contributes to their health record. Enables integration of data across provider silos that have no incentive to share with each other, and allows inclusion of patient-generated context (life story, wearable data) that clinical systems cannot capture. The consumer-facing ownership model is the architectural enabler of the whole-person diagnostic approach.
From the episode “Doctors Aren't the Problem”Hear it on the podcast1 episode
Learn the language of AI-native founders
Every week: the new terms, tools, and workflows founders are using, straight from the podcast.
Related terms in Product & Engineering
One version of the truthA BI principle Rob Collie transfers to text: one authoritative source, collaboratively maintained, so agents don't contradict each other.Open Source Security ModelThe belief that transparent code can become more secure through wider expert review.OpinionationA product design philosophy where the platform makes deliberate, constrained technology choices on behalf of the user — reducing decision fatigue and enabling more reliable AI-assisted code generation.OTP (One-Time Password)A single-use code, often texted to a phone, used as a second authentication factor. Increasingly weak against social engineering. André notes 48 of the top 50 US banks still rely on them; zero of Brazil's top 50 do.Pattern LanguageChristopher Alexander's architectural concept applied to digital product design: every interface is composed of recurring patterns — buttons, navbars, cards, modals, prompts — each with explicit rules and constraints. Building from patterns rather than inventing screens from scratch enables consistency, predictability, and AI-generated enterprise experiences. Chris Strahl frames it as the foundational shift: when you design patterns instead of screens, everything downstream — development, QA, AI generation — becomes tractable.Permission controlThe finer-grained layer of what an authorized user is allowed to do once inside.Permissions and rolesControlling what each user type — admin, manager, employee, client — can see and do. A missing or misconfigured permission is a data breach waiting to happen.PII / PHI / CUIPersonally Identifiable Information, Protected Health Information, Controlled Unclassified Information. The three regulated data categories most likely to trigger fines.