Beware the COVID-tech Cowboys


Health tech has suddenly found its new focus in coronavirus – but are we at risk of doing more harm than good by rushing to use unproven solutions? To avoid chaos in the aftermath, we should focus on tried-and tested tech, and only use novel solutions where need is deemed greater than the acceptable risk.

The COVID pandemic is categorically not a black swan event.

Black swans are by definition unknowable and unpredictable. In contrast, a global viral pandemic was predicted by scientists decades before, from the potential impact, right down to the source of the virus. In fact, only last year The Johns Hopkins Center for Health Security in partnership with the World Economic Forum and the Bill and Melinda Gates Foundation hosted Event 201 (video below), a high-level pandemic exercise on October 18, 2019, in New York, NY to simulate and plan for this exact scenario involving a life-threatening respiratory agent. They accurately predicted the exponential spread of disease, the sudden economic crash, and the desolation it would impose on healthcare systems. Indeed, Bill Gates himself is on record in 2015 predicting at a TED event that it would be ‘microbes, not missiles’ that would would be the next existential threat to humanity.

For the first time in our lifespans we have witnessed a planetary fight against an enemy we knew would come, but simply weren’t ready for. Perhaps scientists didn’t shout loud enough, or maybe politicians didn’t believe it. Either way, here we are – in an unprecedented peacetime global lockdown, with sanctions on almost every facet of everyday human life.

As Winston Churchill famously said – “Never waste a good crisis”

While Churchill meant that crises allowed for strategizing in times of challenge and shoring up contingency planning, other less scrupulous folk have taken on this mantra to mean that a crisis is a time for making a quick profit. Many of my peers in health-tech will have received emails similar to the one below, purportedly advertising honest services to supply essential items and in-demand PPE kit. The veracity of these claims and quality of these products, alongside the manner in which they are introduced, certainly raises eyebrows. It can be difficult, and nigh on impossible to be certain if these are genuine offers born out of a sense of shared humanity and willingness to help, or simply an aggressive and deliberate fishing scheme designed to pull on our heart strings.

An example of unsolicited COVID-related sales - impossible to verify the source or be sure of quality.
An example of unsolicited COVID-related sales – impossible to verify the source or be sure of quality.

Snake oil salesmen aside, and assuming that the majority of companies in the current situation are genuinely trying to help, even politicians aren’t immune to a bit of sleight of hand tomfoolery and unscientific nonsense. Heck, even the POTUS has gone on Twitter to proclaim that Hydroxychloroquine, a toxic drug yet unproven in any trials, is the wonder cure the world needs, and as a result people have already died following his advice. The jury is still out on this specific drug, but if Trump’s bold and unfounded proclamations caused you revulsion, then you should be equally as dismissive of some of the other less infamous claims currently being made, even from well-known tech companies who are ‘only trying to help’.

The pandemic has brought with it a rapid rise of companies touting shiny new apps, wondrous tech and artificial intelligence solutions for COVID. Normally, in the world of health-tech, such things would be taken with a pinch of salt, and allowance made for overly eager marketing. Glowing press releases followed by some distant promise that ‘yes, we are going to do clinical trials in the future, but you should buy us now anyway’ are the norm in this sector. It takes a seasoned eye to spot the bluster from the beautiful, even on the best of days. However, in the current state of global panic, we should not forget about the need for logic and reason, and perform our scientific due diligence accordingly.

There is no emergency in a pandemic

In times of stress, it’s easy to suspend disbelief and trust in those who appear to have our best interests at heart. This is a natural reaction of the unprepared and easily consoled, belying our underlying rational senses, and giving improper credence to charlatans. For instance, there is no way, in a pre-pandemic world, anyone sensible would have suggested giving an un-evidenced drug to entire populations. It would be an unthinkable violation of the proper scientific method. Why is then that so many are ready to accept brand new tech solutions as the saving grace? We should be looking at existing proven technologies, and scaling them up, repurposing them to fit the current need if necessary. We should not be starting from scratch and just throwing everything at the wall to see what sticks.

For the past few years, AI in health tech has been the overriding trend. However, pre-pandemic, very few of these solutions had seen proper evidence that a) they worked in a clinical setting, and b) that they provided the utility they promised. My recent co-authored paper in the BMJ analysed in depth the claims made by researchers and vendors, and discovered a surprising amount of bias and poor scientific methodology in assessing such systems. Now that we are in the full exponential upswing of a pandemic, the same diligent science still holds true, and therefore anyone promising you a COVID clinical decision support tool with an accuracy of 99% is either lying or doesn’t understand statistics.

The regulatory conundrum

Regulation of health technology is still not a solved problem, with many global agencies struggling to keep apace with the recent advances in AI and technology. New regulations in the EU which were due to come into force in May this year were deliberately designed with an increased focus on patient safety and clinical evidence, and a strong lean on robust post-market surveillance. Many devices that were previously classed as ‘low risk’ were due to be up-classed to at least ‘moderate risk’, forcing manufacturers to upgrade their clinical investigations and have external independent scrutiny of their claims. Unfortunately, due to the delay in getting these regulations in place, this has meant that early market entrants have abused the system and benefited from the disorganisation, incorrectly getting regulatory approval for their devices as ‘low risk’ (Class I) instead of ‘moderate risk’ (Class II) while the regulators play catch-up.

A recent proposal by one faction at the EU Commission means that the new regulations could be delayed even further as a result of the pandemic, all the way to May 2021, giving even more manufacturers a chance to bring devices to market without proper process. The pandemic has only served to heighten the surge of novel devices with insufficient regulation, especially given that governing bodies have opened new exemption pathways for COVID-specific tools. While it makes sense to relax regulation in order to get critical medical devices to market that could save lives (e.g. ventilators), the downside is that it opens the floodgates for every cowboy and his compadres to follow suit simply by slapping the word “COVID” onto their offering.

Well-meant but unintended harm may cause chaos in the aftermath

Let’s take a look at three examples to highlight this problem, from low to high risk:


The mandated governmental lockdowns in place have forced millions of people to begin working from home. Accordingly, video conferencing tools have seen a huge surge in popularity, as they allow for remote teams to maintain some ‘face-to-face’ contact. In a healthcare setting, prior to the pandemic, off-the-shelf conferencing tools were little-used and were seen as a security risk. In the rush to ensure continuity however, healthcare providers (and even government officials) have been using such systems voraciously. Zoom has ended up being one of the market leaders thanks to its offering of 40 minutes free of charge per meeting, and perceived low risk. So, problem solved, right? Well, maybe so, for now…. However, Zoom has come under increased scrutiny for its lack of transparency around its claims of end-to-end encryption, and the methods it uses to install its software. Additionally, Zoom has a fatal flaw – anyone can type in a random meeting number, and join anyone else’s meeting. It’s incredibly easy to hack, and certainly does not meet the normal requirements for healthcare data security.

Ever wondered how the @zoom_us macOS installer does it’s job without you ever clicking install? Turns out they (ab)use preinstallation scripts, manually unpack the app using a bundled 7zip and install it to /Applications if the current user is in the admin group (no root needed).

In our rush to use the shiniest tech, we risk opening up a can of worms, potentially laying ourselves open to vulnerabilities we could have avoided. While video conferencing in healthcare will undoubtedly be used more often in a post-COVID world, we should be looking to proven technologies specifically designed for medical conferencing (Lifesize or Pexip for in-house communications, and apps like Livi and Push Doctor for patient contact). Using unregulated, non-healthcare specific tech is too risky in the long term and could ultimately do more harm than good.


The pathological features of COVID-19 can be seen on conventional Chest X-ray (CXR) and CT scanning of the lungs, presenting as ground glass opacities with a reliably predictable pattern of distribution. Radiologists are the experts who interpret these scans, and provide a report to frontline clinicians. Many researchers and companies around the world are naturally attempting to develop AI tools to help radiologists detect the appearances of COVID on these medical images, with some already claiming levels of accuracy above and beyond what anyone had previously claimed on any other commonly known imaging finding, such as pneumonia. From a regulatory standpoint, these AI devices are termed Clinical Decision Support software, which should be classed as ‘moderate risk’, and have some form of clinical investigation as part of their quality assurance.

During the pandemic however, there has been a significant increase in non-regulated, or incorrectly certified Class I COVID-AI devices being offered. These provide little to no transparency on their training and validation data (which presumably is sparse), nor do they have any evidence to demonstrate effectiveness in the clinical workflow. While it is likely that these solutions are being offered in generous spirit and good faith, it remains true that vendors of medical imaging AI were already battling with convincing payers prior to the pandemic, and there is no reason to suspect that all of a sudden these tools have become any more accurate or useful. By choosing a new unproven system, hospitals risk creating a significant technical debt post-pandemic when the normal regulatory frameworks are resumed and such systems get instantly removed from market, as well as potentially opening themselves up to wildly inaccurate technology that could actually hinder frontline care directly.

Instead of grabbing the latest unproven AI tech, hospitals should look for tried-and-tested, appropriately regulated, well-published AI software that has been specifically designed for the screening and detection of lung disease in at risk populations, with useful features suitable for a pandemic that include patient registration, tracking and integration with pathology results (such as Qure.ai’s TB screening system, already in wide use across India, which has been repurposed specifically for COVID case tracking). Additionally, hospitals wanting to help with data sharing to enable further research should partner with official collaborations (rather than any specific vendor), such as the European Society of Medical Imaging Informatics COVID initiative, also supported by the Radiological Society of North America.


The main chink in our armour in dealing with the pandemic has been the global lack of adequate resources in terms of ventilators, Personal Protective Equipment (PPE) and point-of-care testing. Ventilators are clearly a high risk medical device given their requirement for specialist operation and life-or-death need, so it is not surprising to see an incredible effort being made to source more machines. The UK government deal with Dyson has drawn scrutiny, but it is reassuring to see that they are abiding by the rules. Other early initiatives such as OxVent are being fast-tracked, but still have to undergo the appropriate regulatory red tape in terms of demonstrating safety performance. One thing we can all agree on is that the last thing we need in a crisis is thousands of unsafe, untested ventilators inadvertently killing patients.

Point-of-care testing is another area that suffers from lack of adequate technology – not in the form of physical kits, but the relevant chemical reagents and scientific know-how on how to actually detect the novel disease reliably. Unfortunately, there have been premature efforts to distribute unproven test kits, most notably in Spain, where faulty unlicensed test kits had to be returned in their thousands, thanks to Shenzhen Bioeasy Biotechnology which had not yet been licensed by the Chinese National Medical Products Administration to sell its products.

Finally, PPE equipment can come in various forms, from simple paper masks all the way to medical-grade sterilised protective gear with an isolated air supply. This type of PPE is not classed as a medical device, but still has its own particular standards to comply with. The danger in relaxing guidance on PPE manufacturing in order to speed up delivery is the false-reassurance it could provide to frontline healthcare workers. However, this must be balanced with the need to have at least some protection available – even if it is just a simple mask. Current evidence from The Centre for Evidence-Based Medicine shows that even simple PPE can help reduce transmission – but of course, medical-grade sterilised equipment is even better. Understandably, frontline NHS staff were concerned when they received delivery of PPE equipment that was reported to be out of date, as discussed by my co-founder Dr Roshana Mehdian recently when interviewed on Channel 4 news.

Longer term thinking is required, not short-termist panic

It is important during these times of unprecedented healthcare crisis that we remain vigilant to the claims of technology providers, even if they are making genuine efforts to help. Benefits must be carefully weighed depending on the overall risks, and where possible tried-and-tested technology should be chosen over and above novel unproven solutions. Well-meant but unintended harm may cause chaos in the aftermath. What is certain, however, is that when all this is over, health tech will be here to stay, and only those applications that have proven their worth will endure.

Dr Harvey is a board-certified radiologist and clinical academic, trained in the NHS and Europe’s leading cancer research institute, the ICR, where he was twice awarded Science Writer of the Year. This article originally appeared on the Hardian Health blog here.

Categories: Uncategorized