The ads, which played on the radio, in television commercials on channels from HGTV to CNN and in Google searches, were pervasive and seductive. The copy varied, but the message was always the same: brain games were the antidote for a range of cognitive issues, from garden-variety memory loss, to ADHD to Alzheimer’s.
âNo matter why you want a better brain, Lumosity.com can help,â a man reassures, via voiceover, in one ad. âItâs like a personal trainer for your brain, improving your performance with the science of neuroplasticity, but in a way that just feels like games.â
Thirty-five million people bought into the fantasy, paying $14.95 for a monthly subscription for the companyâs desktop and mobile games. But the Federal Trade Commission was unconvinced. In January, the agency sued Lumos Labs, the maker of Lumosity, for deceptive advertising, claiming, its productsâ effectiveness lacked valid scientific backing. Lumos Labs settled for $2 million, although it continues to make and market brain games.
âThe settlement pertained to certain advertising language from past marketing campaigns,â Erica Perng, the company’s director of communications, said via email. â It is important to note that this settlement does not speak to our recent marketing or the quality of our products.â
It may be a rose-tinted interpretation — the FTCâs withering critique of the companyâs lack of evidence reads very much like a judgement of quality — but fundamentally, sheâs right. While the agency made passing references to the Federal and Drug Administration, the federal body tasked with protecting public health, the settlement centered on Lumosityâs deceptive advertorial language.
For an emerging industry unsure of when and how the regulatory shoe would drop, it was an illuminating detail.
Technologyâs power can no longer be siloed; itâs tentacles are everywhere. The influence on health care and personal wellness is already obvious, but thereâs a sense weâre on the brink of an impending sea change driven by personalization, one thatâs already changing how physicians treat patients.
Itâs easier than ever for consumers to directly tap into the trend. Wearables are booming and smartphones are now the rule, rather than the exception. Last year 64% of American adults had one, according to a Pew survey, which means 64% of American adults owned a sophisticated health and fitness tool. By a recent count, there are more than 165,000 health apps, according to IMS Health; while the majority track simple data points, such as steps, heart rate and the number of calories burned, many go beyond this. There are apps that purport to turn a smartphone into a detection and monitoring tool for diabetes, heart conditions, depression and, yes, Alzheimerâs, among other conditions.
As the industry has blossomed, pressure has grown for regulators to manage these claims. But if the entire digital health industry is new, the surrounding regulatory framework remains a work in progress.
A test case
The rules may still be coalescing, but 23andMe provides a cautionary tale on the danger of ignoring regulators. Citing concerns about the accuracy of the results, in 2013 the Food & Drug Administration banned the startup from selling its battery of saliva-based genetic tests to consumers, shutting down its core business.
The decision was a wakeup call for 23andMe, which, in the words of founder and CEO Anne Wojcicki, had been âbehind scheduleâ in responding to the agencies demands. The startup went into immediate damage control mode — in a statement, it painted its relationship with the FDA as âextremely importantâ and emphasized that it was âfully engaging with them to address their concerns.”
Since then, it is has slowly worked its way back into the FDAâs good graces. In February 2015, the agency granted the company permission to sell its direct-to-consumer test for Bloom Syndrome, a rare genetic condition. This paved the way for 23andMeâs announcement, eight months later, that it would sell direct-to-consumer âcarrier statusâ tests, in which users can determine their risk of passing 36 genetic diseases to their children.
For other companies in the digital health space, this arch was a lesson. âIt made everyone realize, âthis is not a game, it has to be taken seriously and you need to factor working with regulators into your resource plans and your timeline,ââ says Steve Krein, the CEO of StartUp Health, an incubator for digital health startups.
For 23andMe and other startups that provide âmedical diagnostic advice,â working with the FDA is âa requisite for doing business,â says Bryan Roberts, a partner at the health–care and technology VC firm Venrock. That said, since its showdown with the company, the FDA has made it clear it isnât interested in all — or even most — digital health–care startups.
Last year, the agency released its recommendations for mobile app developers, which breaks digital health apps into three buckets. In the first: Apps that are clearly not medical devices and are therefore outside of the agencyâs jurisdiction. In the third: Apps that function as or control medical devices, such as a blood pressure monitor, and could pose a risk to patientsâ safety if they donât work as intended. As a broad rule, âif a physician is using it or recommending its use as part of your medical treatment, then you are going to see the FDA take a closer look,â says Morgan Reed, executive director of ACT, a trade group representing app developers.
Itâs the middle bucket — reserved for apps intended âfor general wellness useâ i.e. the majority of consumer-facing digital apps on the market — where the agencyâs involvement gets murkier. While the FDA isnât interested in overseeing the majority of these apps, âitâs not giving up the ability to do so if something bad happens,â says Reed.
While Lumosity falls into this somewhat hazy second bucket, itâs hard to argue âbrain gamesâ pose a real threat to patientsâ safety, no matter the lack of scientific effectiveness.
Where the FTC steps in
âIf you claim your product does something that it doesn’t do, thatâs the FTC,â says Joy Pritts, the former chief privacy officer at the U.S. Department of Health and Human Services.
The FTC has long regulated claims made by supplements, diet pills and homeopathic remedies. But as the sea of health apps has expanded, the agency âhas taken a broad reading of whatâs covered under its provision,â to include claims put out by digital products, says Reed. For supplements and health apps alike, the approach allows it to target companies the FDA wonât pursue.
Like Lumos Labs.
Outside the FDAâs jurisdiction, the FTC went after the company on the grounds it was making deceptive claims without the scientific evidence to back them up. More specifically, âLumosity preyed on consumersâ fears about age-related cognitive decline, suggesting their games could stave off memory loss, dementia, and even Alzheimerâs disease,” the agency’s director of the Bureau of Consumer Protection said in a statement.
Related: The Open-Office Concept Is Dead
Itâs not the first time the FTC has targeted health apps and software on the basis they were misleading consumers. Last year, it settled with two separate apps that claimed to detect melanoma. And in 2011, it fined AcneApp, an app which purported to treat acne via a light emitted from usersâ iPhone screens.
As far as deceptive claims go, it doesnât get more clear-cut than an app promising to zap away acne with a light. But Reed worries that with Lumos Labs, the FTC is on slippery ground. When initially fined, the company pointed to internal studies showing its brain games did, in fact, lead to cognitive improvement. But to the FTC, these didnât qualify as ârigorous, scientific support.â
Which puts the FTC in a the difficult position of determining what, exactly, constitutes valid evidence and startups in the uncertain position of having to guess.
A regulatory quilt
Digital health startups, then, are regulated in something of a piecemeal fashion by the FDA, the FTC and the Health Insurance Portability and Accountability Act (HIPAA), a law designed to protect patients’ medical records. Crucially, HIPAA only applies to startups that collect or access data held by health-care providers. Most direct-to-consumer digital health companies are not covered by HIPAA — neither 23andMe nor Lumosity must comply — although thereâs still widespread confusion around its reach, even among physicians.
This uncertainty can impact funding. In Reedâs experience, startups are less likely to receive VC money if they must first explain how regulations do — or donât — apply to their startup. The intricacies of HIPAA rarely makes for a compelling elevator pitch. It can also dissuade entrepreneurs from entering the digital health industry in the first place, says Darren Dworkin, Cedars-Sinaiâs chief information officer, which encourages too many âsmart, innovative entrepreneurs to build the next music app.â
The Snapchat of digital health
Krein, of health-care incubator StartUp Health, doesnât buy that digital health entrepreneurs have a more difficult time with funding. (More than $4.5 billion was invested in the space last year, according to the VC-firm Rock Health, although much of went to companies operating within the health-care system.) At this point in the digital health lifecycle, he says, investors and entrepreneurs are educated enough that the regulatory system no longer âspooksâ them.
The real problem may be a lack of success stories. For traditional biotech and medical device companies, the payoff for navigating what can be a long regulatory road is already established. When a startupâs drug or device gets FDA approval, its valuation typically skyrockets. But for strictly consumer-facing products or services in the digital health space, itâs not clear the same FDA bump applies. âI canât think of many that have gone on to make a lot of money,â says David Kim, a former partner at the life-science venture firm MPM. âIf there are regulatory hurdles but you donât see a clear carrot, what are you working towards?â
With its $1 billion valuation, 23andMe seems to be an exception. However, âthatâs not going to be repeated by anyone else anytime soon,â says Kim. âThat was largely Google money,â [Wojcicki’s ex-husband is Google co-founder Sergey Brin, and the company poured $7 million into her startup, much of it in crucial early rounds]. In other words, good luck raising the same amount of capital from actual VCs.
Roberts, of Venrock, isnât interested in mail-in kits or health trackers for healthy consumers, which arenât filling a vital need and therefore lend themselves to faddish apps and devices. Instead, he sees opportunity and money in medical products that enable the chronically sick manage their diseases from home instead of the hospital, such as smartphone-based glucose monitors for diabetics.
AliveCor believes opportunities lie somewhere in-between. The company, which makes a medical-grade mobile EKG reader used by physicians and consumers alike, is one of a growing number of startups in the so-called wearable med-tech space. âYou have traditional medical device companies that design products for doctors, and then you have your Fitbits, which do an awesome job establishing fitness tracking category,â says Doug Biehn, the companyâs chief commercial officer. âWeâre not playing in either.â
Instead, the company sees itself in a hybrid space, a position that it to appeal to sick and healthy consumers alike. Its EKG reader — which registers heart rate via a thumb pad that users can attach to the back of their iPhones — is sold direct-to-consumer, but its biggest market is doctors who use it in their offices, says Biehn. And while the device is often recommended by physicians for their patients, 75% of consumers donât have a chronic heart condition. Instead most buyers — who are typically in their 50s and 60s — are worried about developing a condition or are interested in keeping better tabs on their overall health. (The reader is able to tell users whether their heartbeat is normal or if they are suffering from atrial fibrillation, a leading indicator of stroke or cardiac arrest. If they want a more complete interpretation, they can send the data to a cardiologist through the AliveCor app.)
For AliveCor, the lengthy, complex road to FDA approval serves as a useful barrier to entry, says Biehn. The device remains the only FDA-approved mobile EGK reader on the market, and the company hopes itâs a big enough hurdle to stave off competitors. This is a growing concern, as traditionally consumer-facing companies such as Jawbone and Fitbit
have indicated they, too, are interested in the health space.
What, then, of these activity trackers and other digital health startups that operate like traditional tech startups, in that they require short lead times, small seed investments and reside firmly outside the jurisdiction of HIPAA or the FDA? âHow many of these companies have made any real money?â says Kim, who believes the vast majority will be gone within the year.
For Krein, thatâs the wrong question. Yes, most digital health care companies will fizzle (as will most startups). But five, 10 years down the line as the implications of this vast amount of quantified health data take root, âthere will be the Facebook of personal health or wellness — rest assured.â Just because we canât envision what it will look like — he concedes it likely wonât be a standalone activity tracker — doesnât mean it wonât happen.
If a Facebook equivalent emerges in the health–care space, as with the actual Facebook, itâll likely be all about personalization. As it becomes easier for consumers to collect health data, the most important advancements wonât come from devices or sensor technology, but âthe machine learning that you can do on top of that data to determine patterns,â says Biehn. If mined correctly, these patterns can unearth new treatment plans, earlier diagnosis and preemptive care.
To tap into this trend, companies will need to make sure they are on the right side of regulators. Because as Lumosity and 23andMe learned the hard way, their own health depends on it.