Chat on WhatsApp

Healthcare App Development in Saudi Arabia

MOH-aware healthcare apps with Sehhaty integration, bilingual Arabic-English UX, and WCAG 2.1 AA accessibility. Built by the senior team behind Saudi Arabia's National Design System used across 10+ ministries.

Scoped after discovery. 16–24 week MVP delivery. Vision 2030 healthcare aligned, MOH-aware, accessibility baked in.

Quick answer

Who builds healthcare mobile app and platform development for Saudi Arabia?

Ijjad builds healthcare mobile apps and platforms for Saudi Arabia — telehealth, patient portals, clinic management, and medical e-commerce. MOH (Ministry of Health) compliance awareness, Sehhaty and Anat integration where applicable, bilingual Arabic-English UX, and WCAG 2.1 AA accessibility baked in. Senior team in Amman behind Saudi Arabia's National Design System used across 10+ ministries.

  • Categories: telehealth, patient portals, clinic management, medical e-commerce, pharmacy.
  • Compliance: MOH-aware architecture, patient data privacy, audit logging by default.
  • Integrations: Sehhaty (where applicable), Wasfaty, NPHIES claims, NAFATH for KYC.
  • Bilingual Arabic-English UX with WCAG 2.1 AA accessibility for regulated audiences.
  • Timeline: 16–24 weeks for MVP (auth + core healthcare features + compliance + launch).
Karam Abd Al Qader, Founder & Product Consultant of IjjadBy Karam Abd Al Qader, Founder of Ijjad — written for Healthcare teams in Saudi Arabia

Saudi healthcare digital is transforming — and the bar is rising fast

Saudi Arabia's healthcare sector is in the middle of one of the most ambitious digital transformations globally. Sehhaty (the national patient app) crossed 30+ million users. Anat and Wasfaty are processing tens of millions of medical transactions a year. Private hospital groups (Saudi German Hospitals, Dr. Sulaiman Al-Habib, Habib Medical, Mouwasat, others) all launched competing patient apps through 2023–2026. The bar for healthcare app UX in KSA is now genuinely high — patients have reference points from both government apps (Sehhaty, Tabaud) and the better private hospital apps.

What changes for Saudi healthcare app work specifically: MOH (Ministry of Health) has clear regulatory frameworks for telehealth, electronic health records, patient consent, and data privacy. NPHIES (National Platform for Health Information Exchange Services) is the standard for claims and clinical data exchange. NAFATH integration handles patient identity. Sehhaty integration is increasingly expected for any patient-facing app dealing with Saudi citizens. This is not a market where "ship the MVP and figure out compliance later" works — patients and regulators have higher reference points now.

Ijjad approaches Saudi healthcare work with government-scale discipline. The same team that shipped Saudi Arabia's National Design System for 10+ ministries — used by millions of citizens — handles healthcare engagements. WCAG 2.1 AA accessibility (required for inclusive healthcare access), bilingual Arabic-English UX with formal MSA for clinical content, audit logging, and multi-stakeholder governance are baseline practice.

Source: MOH digital health report + Ijjad market analysis, Q1 2026

Saudi healthcare app category market share, 2026

0%10%20%30%40%50%38%Sehhaty (Gov)22%Hospital groups16%Pharmacy12%Telehealth12%Clinic mgmt

Reads as: Sehhaty (the national patient app) dominates patient-facing healthcare digital. Private hospital group apps and pharmacy apps grow alongside. Specialty (telehealth, clinic management) is smaller but high-margin.

Saudi healthcare app at a glance

The numbers behind every Ijjad Saudi healthcare engagement.

16–24wk
Standard MVP delivery
Multi-product platforms: 24+ weeks
WCAG 2.1 AA
Accessibility verified
Audit report delivered at launch
NAFATH
Patient identity baseline
Sehhaty integration where MOH approved
<4min
Patient onboarding target
Measured from registration to first booking
MSA-1st
Clinical content register
Healthcare-experienced Arabic copywriters
KSA-host
Data residency option
AWS Bahrain me-south-1 for PHI

What Ijjad ships for Saudi healthcare apps and platforms

Standard MVP scope tunes by healthcare category — telehealth, patient portal, clinic management, medical e-commerce all have different feature mixes. Technical and compliance baseline is consistent.

Telehealth and patient portal core flows

Patient registration, NAFATH identity verification, appointment booking, video consultation (with proper VoIP integration — usually Twilio or Vonage), prescription management, lab results display, medical record viewing.

Sehhaty, Wasfaty, NPHIES integration where applicable

Sehhaty integration for patient identity and basic medical record interop. Wasfaty integration for electronic prescription routing. NPHIES integration for claims (B2B healthcare apps). We work with the MOH integration teams and their official documentation; we don't guess at integrations.

WCAG 2.1 AA accessibility baked in

Healthcare apps reach users with diverse abilities including older patients, vision-impaired users, and users with motor impairments. WCAG 2.1 AA is not optional — we ship with verified compliance, including screen reader testing on real iPhone and Samsung devices.

Bilingual Arabic-English with formal MSA for clinical content

Clinical content (medication names, lab results, doctor instructions) uses formal MSA. Marketing and patient-facing UI uses Khaleeji where appropriate. We work with healthcare-specific Arabic copywriters for clinical content — generalist copywriters miss medical terminology.

Compliance-aware architecture

Patient PII handled per MOH data privacy requirements. Data residency in KSA where regulations require it. Audit logging for every patient data access. Role-based access control (RBAC) for clinic staff, doctors, patients. Encryption at rest + in transit.

Telehealth video flow with low-bandwidth fallback

Twilio Video or Vonage for HD video consultations with automatic fallback to lower-resolution or audio-only on slow connections. Saudi 5G is great in urban areas but 4G in rural areas is variable — we design for both.

Typical MVP timeline: 16–24 weeks. Discovery + compliance architecture in weeks 1–3, design + Sehhaty integration discovery in weeks 4–6, development in 2-week sprints from week 7, accessibility audit + security review in weeks 22–24. Healthcare compliance reviews extend timelines vs general consumer apps — we plan for it upfront.

MOH-aware compliance — what we build by default

Ijjad is not an MOH compliance consultancy and does not represent legal or regulatory advice. What we do: architect Saudi healthcare apps with MOH and patient data privacy requirements built in from day one, so your compliance team has less remediation work later.

Patient data privacy and PHI handling

PHI (protected health information) handled per MOH Healthcare Data Privacy framework. Sensitive fields encrypted at column-level. Access logged immutably. Consent management workflows built into onboarding so patients explicitly approve data use cases.

Data residency in KSA where MOH requires

Backend hosted in KSA (AWS Bahrain me-south-1, Oracle Jeddah, or local cloud) for patient-related data. Multi-region backup with KSA primary. Cross-border data transfer rules respected per MOH framework.

Sehhaty + NAFATH identity verification

NAFATH integration for patient identity (Saudi citizens and residents). Sehhaty integration where the app needs to read or write to the national patient app. Both integrations follow official MOH documentation and require approval — we coordinate with MOH integration team on your behalf where applicable.

Audit logging for every patient data access

Every read or write to patient PHI logged with timestamp, user ID, action, and context. Logs immutable and exportable in MOH-acceptable format. Retention per MOH requirements (typically 7+ years for medical records).

WCAG 2.1 AA accessibility — verified at launch

Healthcare apps cannot ship with accessibility failures. We deliver an accessibility audit report at launch covering keyboard navigation, screen reader support (VoiceOver + TalkBack), colour contrast, focus management, and alt text. Not a "we tried" statement.

Telehealth-specific privacy primitives

Video consultation flows handle PHI carefully — no video recording without explicit patient consent, encrypted media streams, session metadata not stored beyond what billing requires. Chat-with-doctor flows treat messages as PHI by default.

Our 6-step process for Saudi healthcare apps

Six steps over 16–24 weeks. Compliance discovery and MOH integration scoping happen in the first 3 weeks — healthcare projects that skip this end up rebuilding.

  1. 1

    Compliance + product discovery

    90-minute call with founders and clinical/compliance leads. Map healthcare category, target users, MOH integration needs, Sehhaty/Wasfaty/NPHIES integration scope, patient data flows. Written scope + compliance architecture brief within a week.

  2. 2

    Architecture + Sehhaty integration scoping

    Backend architecture with PHI segregation, data flow diagrams, encryption strategy, audit logging spec. We coordinate with MOH integration team for Sehhaty/Wasfaty/NPHIES sandbox access where applicable.

  3. 3

    Bilingual healthcare design + prototype

    Wireframes first, then high-fidelity bilingual design. Clinical content reviewed by healthcare-experienced Arabic copywriters. WCAG 2.1 AA accessibility baked in from day one. Clickable prototype for clinical stakeholder review.

  4. 4

    Development in 2-week sprints

    Weekly demos with founders and clinical leads. Sprint planning in Linear, code review in GitHub, preview builds in TestFlight + Firebase. Senior engineering throughout. Patient flows tested against real clinical workflows.

  5. 5

    Accessibility audit + security review + MOH-aware testing

    WCAG 2.1 AA accessibility audit (verified by an external accessibility partner or our internal pass). Security review focused on PHI protection. Sehhaty/Wasfaty/NPHIES integration tested in MOH sandbox. We collaborate with your compliance consultancy for the formal pre-launch review.

  6. 6

    App Store + Play Store launch + 30-day stabilisation

    Store submission with KSA region targeting, Arabic-language metadata, ASO keyword strategy. Launch monitoring with clinical-incident alerting. 30 days of bug fixes included. For retainer engagements, transition to 2-week sprint cadence post-launch.

Delivery timeline · 20 weeks

Your Saudi healthcare app project — 20-week sprint

W1W2W3W4W5W6W7W8W9W10W11W12W13W14W15W16W17W18W19W20Compliance + product discoveryArchitecture + Sehhaty scopingBilingual design + prototypeDevelopment sprints (5×2wk)A11y audit + security reviewStore launch + 30-day stabilisation

Reads as: compliance discovery front-loaded across 3 weeks, then 10 weeks of development in 2-week sprints, then security/accessibility QA and launch.

Saudi healthcare app categories — what changes by category

Same engineering team. Meaningfully different feature, compliance, and integration scope per category.

CategoryCore featuresMOH integrationTypical MVP weeks
Telehealth patient appBooking, video consultation, prescriptionsNAFATH + Sehhaty (optional) + Wasfaty16–20
Hospital group patient appAppointments, medical records, paymentsNAFATH + Sehhaty + NPHIES18–22
Clinic management platformScheduling, EHR, billing, claimsNPHIES (claims), Wasfaty (prescriptions)18–24
Pharmacy / Wasfaty integrationE-prescription routing, inventory, deliveryWasfaty official integration14–18
Medical e-commerceProduct catalog, prescription verification, deliveryOptional Wasfaty for Rx products12–16
Tele-mental-healthTherapist matching, sessions, chatSehhaty (limited), session privacy primitives18–22

Saudi healthcare-relevant proof

Ijjad senior team shipped Saudi Arabia National Design System used across 10+ Saudi ministries — government-scale work that handled bilingual UX, WCAG 2.1 AA accessibility, multi-stakeholder governance, and data residency at national scale. Healthcare apps require the same discipline. Public proof at /case-study-saudi-national-design-system and /about/karam-abdalqader. Karam Abdalqader (founder) personally runs every healthcare project; there is no agency hierarchy that pushes regulated-industry work to junior staff.

Healthcare-specific: Ijjad has shipped healthcare-adjacent products (patient onboarding flows, clinic management workflows, prescription tracking interfaces, telehealth video consultation flows) for Saudi clients since 2021. Healthcare client NDAs are strict and we do not name names publicly. But the engineering pattern — MOH-aware architecture, Sehhaty integration discovery, WCAG accessibility, bilingual Arabic-English clinical UX, healthcare-experienced Arabic copywriting, PHI-aware analytics — is established and reusable across new healthcare engagements.

Ijjad partners with several Saudi healthcare compliance consultancies and accessibility audit firms for the regulatory and audit work that sits outside our software engineering scope. We can introduce clients to compliance partners we have worked with previously, coordinate the MOH integration request workflow on the client's behalf, and align the development sprint cadence with the compliance review timeline. The full healthcare app delivery is a team sport: engineering (Ijjad) + clinical workflow design (client clinical lead or partner) + regulatory compliance (specialist consultancy) + accessibility audit (third-party verification). We treat this as one integrated delivery rather than handing off after engineering and walking away.

Saudi healthcare engineering-specific things most teams miss

Sehhaty integration approval timelines are not deterministic. MOH integration teams process integration requests on their own cycle which can range from 4 weeks to 12+ weeks depending on healthcare category and current MOH priorities. We design healthcare apps to ship the core features without Sehhaty integration first (using NAFATH for identity) and add Sehhaty integration as a phase 2 release once MOH approval lands. Apps that gate launch on Sehhaty approval often slip by months unexpectedly. We coordinate with the MOH integration team on the client's behalf where applicable, but the approval cycle itself is outside our control.

Clinical content needs healthcare-experienced Arabic copywriting. Generalist Arabic copywriters mishandle medical terminology — drug names transliterated incorrectly, dosage instructions ambiguous, lab result labels unclear. We brief Arabic copywriters with healthcare experience for clinical content; this is one of the single biggest quality differentiators we have seen between healthcare apps. Patients trust apps with clear clinical Arabic — they uninstall apps where the Arabic feels machine-translated or unclear. We maintain a working list of healthcare-experienced Arabic copywriters across Riyadh, Jeddah, and Amman that we coordinate with on these projects.

Saudi healthcare apps benefit from prominent Vision 2030 alignment in marketing and onboarding. Vision 2030 health sector transformation programme is genuine and well-funded, and patients have positive associations with apps that reference it credibly. We help draft Vision 2030 alignment copy that is specific (not generic "Vision 2030 aligned" tagline inflation) — referencing specific health programme objectives the app supports (eg telehealth access expansion, electronic medical record adoption, patient-centred care delivery).

Telehealth video flow performance on Saudi networks is a specific area most apps under-engineer. Twilio Video and Vonage are the standard SDKs but they default to bandwidth profiles tuned for US/EU connections. We tune session profiles for Saudi 4G in non-urban areas (Hail, Asir, Najran, Northern Border regions) with automatic resolution downgrades, audio-only fallback when video stalls, and explicit "slow connection" UX so patients understand why quality dropped. Apps that assume Riyadh-5G-grade connectivity universally see consultation drop-off in rural areas.

Patient onboarding flow architecture matters more than most teams design for. The "first session" experience for a healthcare app — registration, NAFATH verification, consent capture, profile setup, optional medical history input, first appointment booking — needs to complete in under 4 minutes on average to avoid drop-off. We benchmark every healthcare client onboarding flow on real Saudi devices with NAFATH integration and tune step-by-step. Apps with onboarding flows over 6 minutes see 30-40% drop-off before first appointment; apps under 4 minutes see drop-off under 15%.

Healthcare app analytics require specific PHI-aware patterns. Standard analytics (PostHog, Mixpanel, Google Analytics) track user behaviour that can constitute PHI in healthcare context — viewing a specific medication, completing a mental health assessment, scheduling an HIV test. We architect analytics with PHI segregation: behaviour events tracked at aggregated/anonymous level, PHI-sensitive events excluded from third-party analytics entirely, and internal analytics built on first-party event logging where the PHI sensitivity warrants it. MOH compliance review typically flags any healthcare app sending PHI to third-party analytics.

Healthcare Mobile App and Platform Development in Saudi Arabia — Common Questions

Is Ijjad MOH-licensed to handle healthcare data?

+
Ijjad is a software development team, not an MOH-licensed healthcare operator. We build healthcare apps and platforms for MOH-licensed (or MOH-applying) clients with MOH and patient data privacy requirements built in. We do not represent legal or compliance advice; partner with an MOH compliance consultancy for that side of the work.

Can Ijjad integrate Sehhaty for my patient app?

+
Yes — through the official MOH Sehhaty integration channel, which requires MOH approval. We help coordinate the integration request with the MOH integration team on your behalf, design the integration architecture, and implement once sandbox access is granted. Sehhaty integration timeline depends on MOH approval cycle which we can't control directly.

Does Ijjad work with NPHIES claims?

+
Yes — for B2B healthcare apps (clinic management, claims management, payer-provider workflows). NPHIES integration follows the official Saudi Healthcare Insurance Council documentation. We architect with NPHIES interop from day one rather than retrofitting.

How long does Saudi healthcare app MVP development take?

+
Telehealth patient app MVP: 16–20 weeks. Clinic management platform MVP: 18–24 weeks. Multi-product healthcare platform: 24+ weeks. Healthcare projects extend vs consumer apps because of compliance review cycles and MOH integration approval timelines. We plan for these upfront.

Does Ijjad host healthcare apps in KSA for MOH data residency?

+
Where MOH data privacy framework requires KSA residency, yes — typically AWS Bahrain (me-south-1) for primary backend with multi-region backup. For data not subject to KSA residency requirements (e.g., system metrics, logs without PHI), we host where performance and cost balance best.

Will my Saudi healthcare app meet WCAG 2.1 AA accessibility?

+
Yes — required for inclusive healthcare access in KSA and part of Vision 2030 disability inclusion commitments. We deliver an accessibility audit report at launch covering keyboard navigation, screen reader support (VoiceOver + TalkBack), colour contrast, focus management, alt text, and ARIA labelling. Verified, not just claimed.

Can Ijjad build telehealth video for Saudi networks?

+
Yes — Twilio Video or Vonage with automatic quality fallback for slower connections. Saudi 5G is great in urban areas but 4G is variable in rural areas; we test telehealth video on real Saudi-network connections to ensure consultations work for patients outside major cities.

What scope is needed for a Saudi healthcare MVP?

+
Scoped after discovery. Healthcare MVPs have wide variance based on category (telehealth vs clinic management vs medical e-commerce), MOH integration scope (Sehhaty/Wasfaty/NPHIES), and compliance posture. We don't publish public pricing because the right scope depends on these factors.

Start your healthcare project in Saudi Arabia

Tell us about your product, your regulatory category, your timeline, and what you want it to do. We'll respond with a written scope within 48 hours — no obligation, no sales pressure.