API-Based Personal Healthcare Application: Securing Data and Ensuring Patient Privacy

This paper presents the development of a secure mobile healthcare application designed to provide patients with real-time access to their medical records using advanced API technology. The system ensures data privacy and security by implementing AES-256 encryption and TLS 1.3 for both data transmission and storage. The application also integrates OAuth 2.0 for secure authentication, complying with global healthcare regulations such as HIPAA and GDPR. To enhance scalability and fault tolerance, the system leverages serverless architecture and cloud storage solutions like Google Firebase and AWS, enabling seamless operation under varying user loads. Performance testing demonstrated the application's robustness, as it maintained an average response time of 1.22 seconds and a 99.1% success rate for API calls, even with up to 5,000 concurrent users, ensuring uninterrupted service and reliability in high-demand healthcare environments.