PurpleDaisy Logo
PurpleDaisy
Privacy
Download on the App Store
←Back to Meridian Architecture
Cryptographic & Hardware Security Dossier

The Mathematical Guarantee: 4-Layer Hardware-Bound Health Security

Most health platforms operate on a trust-us policy while storing sensitive blood chemistry on centralized cloud servers. Meridian replaces corporate promises with mathematical and hardware isolation: zero cloud ingestion, Secure Enclave encryption, and Class-A kernel file protection.

Architectural Paradigm

Traditional Health Platforms vs. Meridian Zero-Knowledge

Security DimensionTraditional Health AppsMeridian Architecture
Document OCR Processing
Transmits PDF / Photos to AWS Textract, Google Document AI, or OpenAI APIs
100% On-Device Apple Neural Engine & VisionKit Vision Framework
Master Key Storage
Held on centralized cloud database servers (Vulnerable to breaches & subpoenas)
Physically isolated in iPhone Secure Enclave (Developer holds zero keys)
Data Monetization Policy
Aggregates 'de-identified' biomarker trends and sells to insurers & pharma brokers
Zero third-party analytics SDKs, zero advertising pixels, zero data brokering
Subpoena & Server Breach Exposure
Cloud databases can be hacked, misconfigured, or seized by legal demand
Mathematically zero-knowledge: Meridian holds zero user data and zero keys
Screen Recording & Mirrored Displays
Exposes sensitive medical readings to active screen sharing or AirPlay feeds
Instant hardware blackout shield renders privacy canvas during capture
Multitasking App Switcher Cache
iOS caches readable screenshots of your blood tests in the multitasking carousel
Real-time scenePhase observer replaces UI with branded privacy shield on blur
Multi-Layer Cryptographic Model

The 4-Layer Defense Pipeline

Every layer operates independently, providing defense-in-depth across storage, operating system, and hardware boundaries.

Galois/Counter Mode

Layer 1: Application-Level Cryptography

AES-256-GCM + 128-bit Authentication Tag (MAC)

Technical Description

Every clinical reading, extracted analyte, original document, and cached thumbnail is encrypted using AES-256-GCM before it ever touches non-volatile flash memory. The Galois/Counter Mode implementation appends a 128-bit Message Authentication Code (MAC) to every payload.

Threat Mitigation & Clinical Security

Prevents raw memory dumps and rejects any file that has experienced physical bit corruption or unauthorized tampering. If an attacker attempts to alter a single bit (such as modifying an ApoB reading from 80 to 180 mg/dL), the GCM authentication tag validation fails immediately and purges the data.

Cryptographic Specifications
AlgorithmAES-256 in Galois/Counter Mode (GCM)
Integrity Verification128-bit Poly1305 / GHASH MAC Tag
Initialization VectorCryptographically unique Nonce per payload
Tamper RejectionImmediate zeroization upon MAC tag failure
Active Session Protection

Runtime Privacy & Visual Shields

Security that protects your clinical records during live usage on shared displays and public spaces.

On-Device Neural Engine OCR

Apple Vision Framework

Scans paper lab reports and multi-page PDFs locally. Analyte extraction, unit conversion, and reference range parsing execute in under two seconds in Airplane Mode with zero network packets sent.

Screen-Recording & AirPlay Blackout

Display Output Monitor

Actively monitors hardware display output status. If screen recording, cable capture, or AirPlay mirroring is detected, Meridian instantly blanks out sensitive biomarkers.

Multitasking Privacy Shield

Active Focus Observer

When swiping up to switch apps, Meridian instantly replaces the active viewport with a minimalist security canvas, ensuring iOS never caches readable lab thumbnails in memory.

Hardware Biometric Gate & Integrity

Face ID / Touch ID / Runtime Audit

Requires biometric hardware challenge to decrypt the vault. Real-time integrity routines inspect device state to detect jailbroken environments and unauthorized dynamic library injections.

Data Lifecycle

The Ephemeral Shutter-to-Vault Lifecycle

What happens between pointing your camera at a laboratory report and viewing your longitudinal trends:

01. Capture

Camera captures frame into volatile memory buffer.

02. On-Device OCR

Apple Neural Engine extracts text locally in under two seconds.

03. Hardware Seal

Payload sealed with AES-256-GCM using Secure Enclave key.

04. RAM Purge

Temporary image buffers and plaintext tokens are zeroized from memory.

05. Lock State

When device locks, Class-A protection purges keys from kernel RAM.

Experience Sovereign Medical Intelligence

Download Meridian: My Lab Records Home from the Apple App Store. Start tracking 500+ biomarkers and calculating biological age with complete cryptographic privacy.

Download on App Store
Meridian Logo
PurpleDaisy
Meridian

Your complete medical history, mathematically organized and protected on your device. No accounts, no cloud, no compromise.

Product

  • Pricing
  • Security Architecture
  • Support

Company

  • About
  • Blog
  • Careers
  • Press Kit

Legal

  • Privacy Policy
  • Terms of Use
  • Cookie Policy

© 2026 PurpleDaisy Inc. All rights reserved.

Meridian is an organizational tool, not a diagnostic medical device. It does not provide medical advice. All health decisions should be made in consultation with a qualified healthcare professional.