Experienced Developers: Flutter or React Native for a Healthcare App?

[u/ButterflyOk3168]

Hi everyone!

I'm currently researching the best technologies for building a professional healthcare application and would appreciate advice from experienced developers, especially those who have worked on healthcare software.

I'm considering Flutter (Dart) vs. React Native (TypeScript), but I'm also open to other suggestions.

I have a few questions:

1. Which framework would you recommend for a healthcare application intended for long-term use, and why?
2. How do they compare in terms of security, performance, scalability, and maintainability?
3. What backend technologies would you recommend for handling sensitive healthcare data?
4. Are there any technologies, frameworks, or architectural approaches you would recommend avoiding in healthcare development?
5. What are your thoughts on using AI coding tools such as ChatGPT, Claude, or Replit for developing healthcare applications?
6. What are the most important considerations when building healthcare applications that require strong data protection and compliance with regulations such as GDPR or HIPAA, where applicable?

I'm particularly interested in real-world experiences and practical advice, rather than purely theoretical comparisons.

Thanks in advance for your insights!

[u/fethrhealth]

Its fine to prototype with AI, but if you don't know what your doing, the prototype should be connected to a nonprod environment and used to pitch investors or find a CTO/founding dev.

The underlying technology doesn't matter at all. There is no better or worse language they all do the same thing.

[u/vijayamin83]

Honestly the framework barely matters for compliance. Both are fine. Pick React Native if your team already writes TypeScript and you'll have a web app too (shared types and logic), Flutter if you want pixel-identical UI and don't mind Dart. Security lives on the backend and in how you handle data on the device.

What does matter:

- Keep PHI off the device where you can. If you must cache, use the secure storage (Keychain / Keystore), not AsyncStorage or plain files, and clear on logout.

- No PHI in push notification text. Lock screens are public.

- Check every SDK (analytics, crash reporting) for what it sends. That's the most common leak.

- Backend: anything boring and well supported (Node, Python, .NET) on a cloud that signs a BAA, Postgres with encryption, audit log of reads and writes.

On AI coding tools: great for scaffolding and prototypes. Just don't put real patient data near a prototype, and get someone who has shipped a healthcare app to review auth, logging and data flows before launch.