Last updated September 21, 2026. Sig has not launched yet.
The questions a pharmacist has to answer before installing anything on a phone they carry into a patient care area.
HIPAA compliance is a property of how an organization handles protected health information — PHI, meaning anything that identifies a patient — and not a certificate an app can hold. No honest app calls itself "HIPAA compliant" on its own. The useful answer is what Sig actually does with your data.
Sig is a reference tool, not a record-keeping system. It is not designed to receive protected health information and does not ask for it. Values you type into a calculator or a dosing check are held on your device while you use the tool and are discarded when you leave it. The app has no account, no analytics, and no server of ours behind it, so there is no place for patient data to accumulate.
Because Sig is not built to receive PHI, HARRIS CLINICAL SOFTWARE LLC is not a covered entity or a business associate under HIPAA, and does not sign business associate agreements (BAAs). The next question explains what that means for your compliance review. Do not enter names, dates of birth, or medical record numbers anywhere in the app. If your employer restricts which tools may be used with patient data, follow their policy.
A business associate agreement, usually shortened to BAA, is the contract a hospital or pharmacy signs with a vendor that will handle protected health information on its behalf. Compliance and IT departments ask for one before approving most clinical software, so it is a fair question to lead with.
Sig does not need one, and that is deliberate rather than a gap. A BAA covers vendors that create, receive, maintain, or transmit PHI for a covered entity. Sig does none of those things — there is no server of ours for patient data to reach — so a BAA would be describing a data flow that does not exist.
What a security reviewer usually needs instead is the data-flow answer, and it is short: the app has no accounts, no analytics, no advertising, and no third-party SDKs; bundled content works with the network off; the only outbound requests are drug and code lookups sent from the device straight to named United States government services; and the only thing that ever reaches us is a problem report you choose to send. The privacy policy names every service and what each one receives.
Bundled content works in airplane mode. When you look up something that is not bundled — a specific label, an NDC, a price, a code — the app sends that one query from your device directly to the public service that holds the answer. The request carries the drug name or code you asked about plus the ordinary technical details any web request carries. It never carries your name, an account, a patient identifier, or anything typed into a calculator.
We do not operate a server between you and those services. We do not proxy the requests, we do not log them, and we receive nothing back from them.
The one exception is Report a Problem. If you fill in that form and tap Send, your description, the page you were on, the app and system versions, and an optional screenshot go to our Apple CloudKit database. Nothing is sent until you tap Send, you see every item beforehand, and a switch removes the screenshot.
No, and you never will. Sig has no sign-in, no Sign in with Apple, no social login, and no password. This is written into the privacy policy as a commitment, not just a description of the current version, so changing it would require a published policy revision rather than a quiet update.
Subscriptions and syncing both work without an account. Apple records a subscription against the Apple Account that bought it, so it appears on your other devices with nothing to tap. Planned syncing of favorites and settings uses the private database inside your own iCloud account, which we cannot read and which counts against your iCloud storage rather than ours.
The practical effect is that there is no Sig account to be breached, sold, or subpoenaed, because no such account exists.
Nowhere. Barcode scans and imprint or pill images are analyzed on the device using Apple’s on-device frameworks. Images are never saved to your photo library, never uploaded, and never sent to us. The app asks for camera or photo permission only when you open one of those features, and you can revoke either in iOS Settings at any time.
Turn the screenshot off. The report form captures the screen you were on, shows you that image before anything is sent, and includes a switch that removes it from the report. Send the description alone.
Reports carry no name, email address, or Apple Account. Apple attaches an opaque per-app identifier to each record, which we cannot use to identify you and would use only to stop abuse. We delete a report when the problem is resolved, and in any case within twelve months.
How a dosing recommendation in Sig got there, and how much weight it can carry.
Sig is authored by a Doctor of Pharmacy and reviewed by two additional Pharm.D. reviewers before launch. The app will be published only once the author is a registered pharmacist.
Review status is visible rather than assumed. Every data set shows the date it was last reviewed on the About and Sources screen, and any item that a named reviewer has not yet cleared is labeled In Development in the app so you can weigh it accordingly. At the time of writing, review is still in progress and most content carries that label.
Sig is published by HARRIS CLINICAL SOFTWARE LLC. The named reviewer roster and a public corrections log are part of the launch plan.
Label first. Drug information starts from FDA-approved labeling obtained from DailyMed and openFDA. Where practice diverges from the label, the divergence is called out and cited rather than quietly blended in.
Clinical recommendations come from the published guidelines of the societies that issue them: 215 guidelines across 15 specialties, carrying 6,433 individual recommendations, each tied to the document and section it came from. Pricing is NADAC from the Centers for Medicare & Medicaid Services. Drug names, ingredients, and classes come from RxNorm and RxClass. Lactation data comes from LactMed.
Every calculation and recommendation shows its inputs, the rule that was applied, and the citation behind it, so you can check the source rather than take our word for it.
It means the item has been written and cited but has not yet been cleared by a named reviewer. It is a signal to apply more of your own scrutiny, not a warning that the content is wrong.
We would rather show you the review state than hide it. An app that looks uniformly authoritative gives you no way to tell which parts have had two sets of eyes on them.
Dose adjustment rules, antimicrobial guidance, and boxed warnings are re-reviewed at least every six months. Every bundled data set displays the date it was last reviewed, and a data set past its review date says so in the app rather than staying quiet about it.
Live data — labels, prices, shortages, recalls, approvals — reflects what the public service returned at the moment you asked, and can lag or contain errors that originate at the source.
Every screen has a Report a Problem button. Reported content errors are reviewed by a pharmacist, and fixes are listed in a public corrections changelog by date, without identifying who reported them.
No. Sig is general reference and educational software for healthcare professionals, in the same category as a printed drug reference. It has not been reviewed or cleared by the FDA.
It is built to sit within the clinical decision support description in section 520(o)(1)(E) of the Federal Food, Drug, and Cosmetic Act: it displays and organizes published medical information and shows the basis for every recommendation, so that a healthcare professional can independently review that basis rather than rely primarily on the software. That is also why every output shows its inputs, its rule, and its source.
Sig is decision support. It does not provide medical advice, does not diagnose or treat anyone, and does not create a clinician–patient relationship. Any clinical decision made after consulting Sig is your decision, made under your own licensure and professional judgment.
Verify against current prescribing information, primary literature, your institution’s protocols, and the patient in front of you before acting. Where Sig and the FDA-approved labeling or your institution’s policy disagree, the labeling and the policy control.
Counts from the current build. All of it ships on the device.
Clinical calculators: 1,047 equations and scores that compute, each showing its inputs, formula, and citation. Guidelines: 215 across 15 specialties. Conditions: 108 disease-state pages wired to the calculators, guidelines, and drugs you reach for next, plus 178 decision trees built from published algorithms.
Drug tools: renal and hepatic dose adjustment rules for 217 drugs, crush, chew, and split statements for 645 drugs taken from their FDA labels, 236 NIOSH hazardous drugs flagged, and 19,925 pill products for identification by imprint, colour, or shape.
Antimicrobials: 60 agents mapped against 99 organism groups for spectrum lookups, plus an empiric, targeted, and de-escalation selection tool with patient-factor gating for allergy, renal function, pregnancy, and QT. Your local antibiogram overrides the national defaults.
Pharmacy tools: controlled-substance schedules for 50 states and ten prescriber professions, a DEA number check, the FDA Orange Book with 48,865 products and the Purple Book of biologics, a Sig translator, day supply and NCPDP billing units, USP <795>, <797>, <800>, and <825> compounding requirements, and an over-the-counter guide of three hundred and ten ingredients.
Dosing tools: opioid MME totals from the CDC 2022 table, corticosteroid equivalence and tapers, a taper planner, levothyroxine and warfarin weekly dosing, lab values with corrections and caveats, a smoking cessation quit plan, and 3,437 counseling points across 375 drugs.
Also shipping: a live openFDA feed of shortages, recalls, approvals, and label changes; a drug interaction check that reads current FDA labeling; an inotrope and vasopressor receptor table; 40 patient assistance programs; a pill counter; clinical code lookups; four Home Screen widgets; a report button and a guided tour on every page; and one search across drugs, conditions, guidelines, and calculators. Favorites work on any of it, and the Home screen can be rearranged.
No, and it says so inside the app on its own Sources and Limits page. Sig does not license a commercial interaction database and does not assign severity ratings.
What it does instead: you build a medication list, and for each drug Sig reads that drug’s current FDA label and its drug classes, then looks for mentions of the other drugs on your list by name or by class. It backs that with the FDA’s published CYP and transporter tables and HHS guideline tables. The result is "here is what the labeling says about these two together", with the label section it came from.
That is genuinely useful and it is honestly sourced, but it is not a substitute for a severity-rated interaction checker. It needs a network connection to fetch the label, and a drug with no openFDA label returns nothing. Your medication list is held for the session only and is never saved or transmitted.
Yes. The bundled reference works in airplane mode, which is the point — a basement pharmacy or a concrete-walled med room is where a reference usually fails you. Live lookups such as a specific label, a current price, or a shortage notice need a connection; when a service is unreachable the app shows bundled content or an honest "not available" state rather than a blank screen.
iPhone and iPad, each with a layout designed for it rather than one stretched to fit. On Apple silicon Macs it runs as the iPad app in a Mac window.
Accessibility is treated as part of shipping, not a later pass. VoiceOver labels, Dynamic Type through the largest accessibility sizes, Reduce Motion, and Increase Contrast are tested on both the iPhone and iPad layouts before a release, and no status is communicated by colour alone.
Yes. Sig is built for pharmacists, pharmacy technicians, pharmacy students and residents, and other licensed healthcare professionals in the United States. You must be 18 or older. It is not intended for patients or the general public.
Sig has not launched yet. Here is where it stands.
Sig has not launched. It is in active development and is not yet on the App Store or in open beta, and nothing on this site should be read as saying you can install it today.
It will be released once the author is a registered pharmacist, expected after graduation in December 2026. A firm date will be announced here and to the waitlist first.
Join the waitlist to be invited to the TestFlight beta when it opens and to be told the day it ships. The waitlist is an email to us and nothing more — no account, no marketing list, and you can ask to be removed at any time.
The core is free and is intended to stay that way: every monograph, every calculator, dose adjustment, antibiotic selection, the identification tools, conditions, guidelines, codes, search, and the safety content inside them.
Sig Pro is planned as an optional subscription for workflow features such as the patient workup, watchlists with alerts, syncing, and exports. Pricing is not final and will be shown in the app before you subscribe. It will be sold through Apple’s In-App Purchase, so Apple handles payment and we never see your card or billing address.
Email the waitlist and say you would like in, and roughly where you practise — hospital, community, ambulatory, or other. Beta invitations go out through Apple TestFlight. There is no cost and no obligation to keep using it.
Yes to both. Feature requests and content corrections are read by a pharmacist. If you are a Pharm.D. interested in reviewing content in your specialty, say so and say which specialty — the reviewer roster is being built now, and named reviewers are credited in the app for the sections they clear.