MedRecords is Nigeria's patient-owned medical record platform — one verified identity that follows you across every clinic, pharmacy, dentist, and lab. Built FHIR-native, anchored to NIN, designed for the connectivity you actually have.
Medical records exist — but they live inside the four walls of whichever institution made them. They don't travel. They don't follow the patient. They don't add up.
A 34-year-old patient with diabetes, hypertension, and a known penicillin allergy walks into a pharmacy near her office. The pharmacist sees none of this. She walks out with the same prescription she filled yesterday at a different branch.
— A representative day in Nigerian healthcareMedRecords gives every Nigerian a single verified medical identity — anchored to NIN, controlled by the patient, queryable by any provider they consent to. The record is built on HL7 FHIR R4 from the first line of code.
One verified identity per Nigerian, bound to NIN with photo and biometric matching. Provisional accounts for the unverified.
Patients grant scope, duration, and category. Full, dental-only, time-limited, single-encounter, dispense-only — or break-glass for emergencies.
The canonical model from day one. No retrofit, no migration. Built to interoperate with any compliant system.
Provider apps queue encounters offline and sync on reconnect. USSD shortcode for feature phones. Designed for Nigerian network reality.
Every read and every write is logged. Patients see exactly who looked at their record, when, and under what consent.
Registered data controller. Designated DPO. 72-hour breach notification. Field-level encryption for special-category data.
Free for patients. SaaS for providers. PMPM for payers. Each layer makes the next layer more valuable.
Free for every Nigerian. The record is the patient's, not the hospital's. It moves with them across providers, exports for embassy applications, and supports dependents under one account.
Clinicians see the patient context they need in one screen — allergies, active medications, recent labs. Pharmacies verify prescriptions and catch interactions. Specialists see only their scope.
HMOs, NHIA, and state schemes access encounter and dispense data scoped to enrolled members, with member consent enforced. Better claims, less fraud, real risk pricing.
The same flow runs at the GP, the pharmacy, the dentist, the lab. Each step is FHIR-shaped. Each access is logged. Each consent expires.
Patient scans the provider's QR code or shares a 6-digit one-time code from their app at reception.
Patient grants scope (full, dental, pharmacy, single-encounter) and duration. Provider gets a signed token.
Provider sees relevant history, authors the encounter, writes the prescription — all structured FHIR.
Pharmacy verifies the Rx, checks for interactions and duplicates, records what was actually dispensed.
Patient sees every access in a chronological log. Disputes flow to compliance review within 14 days.
Twelve categories, mapped to FHIR resources, visible to the patient. Allergies and active medications always surface. Every entry is signed by whoever authored it.
Medical data is permanent. A breach cannot be undone. We build like that's the operating assumption.
Registered data controller from incorporation. Designated DPO. 72-hour breach notification commitment. NDPC engagement from day one.
Section 41 readyEncryption at rest and in transit. Field-level encryption for HIV, mental health, and reproductive data with separate key custody.
In-country residencyEvery read and every write is cryptographically signed and logged. Tampering is detectable. Patients see who accessed their data and when.
Patient-visibleHL7 FHIR R4 as the canonical model. We publish the Nigeria Implementation Guide as an open standard. No proprietary lock-in.
Open standardEmergency access requires written justification, MFA re-auth, immediate patient SMS notification, and 7-day compliance review of every event.
Auditable alwaysEvery account is anchored to a verified NIN with phone OTP and biometric photo match against NIMC records. No fake or duplicate accounts.
NIMC integratedIndependent third-party security audit completed before public launch. ISO 27001 certified by month 24. SOC 2 Type II thereafter.
Annual pentestsThe patient is the data controller. The platform never sells identified data — full stop, written into our articles of incorporation.
Never soldA 36-month build sequence. Pharmacies wedge the network. GPs follow. Payers fund the long-term base. Multi-city expansion follows proof.
Two Lagos LGAs. 20 active pharmacies. 5,000 patient accounts. 25,000 dispense events. Seed round closed.
Full clinician workstation. 50 active providers. First HMS adapter. Offline sync engine. First payer LOI.
Abuja and one secondary city. First HMO in production. ISO 27001. Series A closed.
5+ cities. 1,000+ providers. 1M+ patients. Multiple payers under contract. Hospital tier live.
ECOWAS expansion starting with Ghana. Public APIs. Research data products. Clinical decision support overlays.
The objections we hear most often, answered honestly. The full stress-test memo goes further; this is the public version.
We're partnering with pharmacies, GP clinics, hospitals, and HMOs in Lagos for the Phase 1 pilot. Patients can join the waitlist for early access in their area.
Pharmacy, clinic, or hospital interested in piloting? We're onboarding design partners in Lagos now. partners@medrecords.ng
Full materials including PRD, business model, and stress-test memo available under NDA. hello@medrecords.ng