Mobile Apps

Healthcare app development in Dubai: booking, telemedicine and pharmacy apps under DHA rules

What a patient app, a clinician app and a pharmacy delivery app in Dubai have to do, and the DHA telehealth standards, health data law and NABIDH requirements that shape every one of them.

A Dubai Metro train on an elevated track between office towers
Photo: Rob Dammers, CC BY 2.0, via Wikimedia Commons

Healthcare app development in Dubai is shaped less by screens and more by regulation. If the app only books in person visits, the build looks like any good booking product with insurance details added. Once it carries video or chat consultations, prescriptions or medicine delivery, the Dubai Health Authority’s telehealth standards, the federal health data law and the NABIDH exchange decide where data lives, who may run the platform and what the app must record.

This guide covers the patient app, the clinician app and the admin panel, then the DHA and federal rules that apply to booking, telemedicine, records and pharmacy delivery, as of October 2026.

Key points

  • A telehealth platform in Dubai must be assessed and approved by DHA before it goes to market, and it may only connect licensed facilities to patients, not deliver care itself.
  • Health data tied to services provided in the UAE may not be stored or processed abroad unless a health authority resolution allows it.
  • Telehealth consent must identify the patient with at least three identifiers and be auditable when captured electronically.
  • Providers must verify insurance eligibility before a telehealth service and tell the patient about expected out of pocket costs in advance.
  • Pharmacy delivery needs its own DHA approval, temperature records and handover rules, and controlled medicines cannot be delivered at all.

Not legal or regulatory advice. This guide summarises public DHA, DOH, MOHAP and federal documents we opened in October 2026 so that you can brief a build sensibly. Licensing decisions belong to the regulator, and standards are revised. Confirm your own case with the relevant health authority or a qualified licensing adviser before you commit to a feature list.

Who holds the licence for a healthcare app in Dubai

The first question in healthcare app development in Dubai is not which framework to use but whose licence the app runs under. The DHA Standards for Telehealth Services, Version 4, define a telehealth platform as a digital platform for remote telehealth services, and the definition names a mobile application or web interface. Licence categories include a standalone telehealth centre, telehealth added to an existing licensed facility, a booth, and telehealth platforms.

Section 7.6 says a platform for internal or commercial use must be assessed and approved by DHA before in house or go to market implementation, must have legal representation in Dubai with a commercial licence, must name a Business Technical Director, and must offer technical support with a defined escalation matrix for physicians and patients. Its communication channels must be approved by the TDRA.

Section 7.8 draws a hard line: a platform is a technology tool that connects licensed health facilities to patients. It may not deliver clinical services, its licence does not make it a healthcare provider, and it may not recruit healthcare professionals to deliver care through it. A hospital group building its own patient app sits on its facility licence, while a startup building a doctor marketplace has to partner with licensed facilities instead of hiring doctors into the app.

Decide whether you are a facility with an app or a platform serving facilities before a single screen is drawn.

Section 7.7 adds that changes to a platform’s core functions, data management or ownership must be reported to and approved by DHA. Every roadmap for healthcare app development in Dubai therefore needs a column asking whether a feature needs DHA sign off, which a generic product backlog never carries.

Patients and facilities outside Dubai

DHA says providers giving continuity of care to patients outside Dubai must meet that jurisdiction’s rules. In Abu Dhabi, the Department of Health’s Standard on Tele-Medicine, effective 16 September 2020, requires identifiers such as the Emirates ID number, or a passport number where none is issued, and data security compliant with ADHICS, the Abu Dhabi healthcare information and cyber security standard. Facilities elsewhere are licensed by the Ministry of Health and Prevention, which notes that an initial approval does not itself authorise a facility to operate. An app serving several emirates should know which facility, and which regulator, each consultation belongs to.

Patient, clinician and back office journeys

Most healthcare products end up as three connected surfaces sharing one data model. Writing each journey down first keeps healthcare app development budgets in Dubai focused on what patients and staff actually do.

The patient app

A patient registers, adds family members, stores an insurance card, finds a doctor, books, attends in person or by video, receives a prescription or referral, pays any balance and later views results. Each step has a regulatory edge: identity at registration, consent before a teleconsultation, eligibility before billing, and documented records afterwards.

The clinician app

Doctors need a day view, a pre consultation summary, a reliable video room, structured notes, prescribing and referral tools, and a way to escalate. The DHA standard says complex or emergency patients shall be referred for face to face or emergency services, and that advice to seek emergency care must not be delayed whatever the patient’s insurance plan. Put that escalation on the consultation screen, not in a settings page.

The admin panel and front desk

Coordinators manage rosters, specialties, slot rules, insurance networks, cancellations and refunds. DHA requires a licensed facility to keep a record of all physicians engaged in telehealth, and all telehealth patient engagement must be documented for audit, quality improvement and inspection. Healthcare app development in Dubai that skips a clean export of that history costs more in staff time than it ever saves in build time.

Doctor booking app development in Dubai: specialty, insurance and slots

Doctor booking app development in Dubai looks simple, yet in healthcare it is where most patient complaints start. Patients search by a named doctor they were referred to, or by specialty and symptom, so the search needs both paths. Specialty labels should follow how the facility licence describes each doctor; a clinic appointment app in Dubai that lists a dermatologist under “skin care” invites confusion at the front desk.

Slot logic that matches the clinic

Slots depend on consultation type (new, follow up, video), the room or equipment needed, the doctor’s sessions across branches, and buffer time. Video and physical slots rarely share a length. Keep those rules in the admin panel so coordinators can change them without a developer, and decide what happens when a patient books video for a problem that needs an examination.

Insurance card capture and eligibility

Capturing the card is a convenience; verifying eligibility is a requirement once telehealth is involved. DHA says providers shall verify a patient’s health insurance eligibility before delivering any telehealth service, and inform patients in advance of expected out of pocket expenses. Telehealth services must be coded with DHIC approved ICD and CPT codes, with claims submitted through eClaimLink.

In practice, the card photo and member number feed the facility’s billing system, which runs the eligibility check; the patient sees what they may pay before confirming; and the consultation record carries the codes the claim needs. In healthcare app development for Dubai clinics, never show “covered” based on a card photo alone.

Telemedicine app development in the UAE: what a video consultation must capture

Telemedicine app development in the UAE is mostly about the minutes before and after the call. The DHA standard lists what a teleconsultation service must ensure, and almost every item becomes a screen or a database field.

  • Identity. Patient identification, authentication, verification and consent are required, and consent must identify the patient with at least three identifiers chosen from full name, date of birth, Emirates ID number, health record number or personal contact number.
  • Electronic consent. E consent is acceptable when the manual consent and identification requirements are met and the consent can be audited. It must sit inside the service workflow and in the patient’s health record.
  • What consent covers. Security measures, benefits, constraints and risks, consent for audio recording and data transfer, the plan if technology fails, and the right to stop or refuse treatment.
  • Recording. Video may be recorded only on an ad hoc or time limited basis, for example for education or quality improvement, with written consent, a named responsible person, encryption, a storage period and a deletion plan.
  • Chat. Facilities may offer an asynchronous, chat based consultation alongside live video.
  • Prescribing limits. Telehealth excludes prescribing narcotic, controlled or semi controlled medication, and patients must be told which medication groups cannot be prescribed remotely.
  • Access. Provisions must be in place for People of Determination.

So the consent step in healthcare app development for Dubai providers cannot be one tick box borrowed from a retail app. It needs versioned Arabic and English consent text, a timestamped record tied to the patient’s identifiers, and a way for auditors to retrieve the exact version agreed. A common problem we see in early prototypes is consent stored only on the device, which fails the audit test the first time someone reinstalls.

The video layer must run on encrypted platforms; the standard refers to DHA approved, encrypted telehealth platforms for travelling residents and visiting patients. Choose a video provider whose media path and recordings can stay inside the UAE, for the reasons below.

Health data law, UAE hosting and NABIDH

Federal Law No. 2 of 2019 on the use of ICT in health fields applies across the UAE, including free zones. The UAE Government portal summarises its duties: keep health data confidential and do not share it without due authorisation, protect it from unauthorised changes, and make it available to authorised parties when needed. Article 13, as published on the UAE Legislation portal, says health data related to services provided inside the UAE may not be stored, processed, generated or transformed outside the country unless a health authority resolution issued with the Ministry allows it. The law also sets a minimum retention period of 25 years from the last health procedure provided to the person.

DHA’s telehealth standard turns that into platform rules: data centres at least Tier 3 certified, data held with a UAE cloud provider certified by the Dubai Electronic Security Centre, and named information security certifications for the platform itself. It places the exceptions to localisation in Article 2 of Ministerial Decision No. 51 of 2021. For healthcare app development in Dubai, this means notification text, analytics events, crash logs and support tickets all need checking, because each can quietly carry health data abroad.

App componentThe question to ask your developer
Database and file storageWhich UAE region and which DESC certified provider holds records, scans and recordings?
Video consultationWhere are media servers and recordings located, and who can open them?
Push notificationsDo messages avoid diagnoses, drug names and results, since they pass through Apple and Google services?
Analytics and crash reportsAre screen names, searches and logs stripped of health information before leaving the app?
Support toolsDoes any third party help desk store patient messages outside the UAE?

Connecting to NABIDH

NABIDH is the DHA health information exchange connecting facilities in Dubai. The telehealth standard says a facility’s IT must integrate with its electronic health record, and that the records system shall integrate with Nabidh. DHA’s interoperability standard names HL7v2 as the recommended standard for submitting and accessing data, and says systems should also support FHIR and IHE messaging. Your app usually talks to the EHR and the EHR talks to NABIDH, so a healthcare app development plan in Dubai should name both connections.

Consent works differently for the exchange. DHA’s consent and access control standard says facilities do not need consent to upload health information to NABIDH, but must include a NABIDH sharing clause in their general consent. Patients may object, and opt out is managed by DHA through a signed form sent to its NABIDH team. The app can explain and link that process; it should not invent an opt out switch DHA does not recognise.

Pharmacy delivery app Dubai: prescriptions, dispensing and the courier

In healthcare app development for Dubai pharmacies, a delivery app falls under two separate parts of the DHA telehealth standard. Telepharmacy covers remote prescribing, teledispensing and medication therapy management, and explicitly excludes delivery services, vending machines, online pharmacy and non prescription dispensing. Teledispensing means licensed pharmacists verify electronic prescriptions, counsel patients by video, phone or secure messaging, and authorise release from a licensed pharmacy.

Delivery sits in Appendix 6, covering over the counter medicines and general items from outpatient pharmacies. As of October 2026 it says:

  • The pharmacy must be DHA licensed and seek DHA approval to dispense via a delivery system.
  • Pharmacy staff or a third party may deliver, under the pharmacist in charge; a third party courier needs DHA approval, with vehicle photos, the contract and a signed undertaking.
  • Telephone orders must become a written or electronic record with time, products, customer, delivery and pharmacist details.
  • Products travel in original manufacturer packs with leaflets, in temperature and humidity controlled containers.
  • A temperature and humidity logbook is signed by the pharmacist on dispatch and the patient on receipt, and kept for at least three years.
  • The order goes to the person who placed it, or another person aged 18 or over with the customer’s approval.
  • Narcotic, controlled and semi controlled medications may not be delivered.

Each line is a feature. The rider app needs signature capture and a recipient check, the pharmacist console needs an order record that satisfies the telephone rule, and the catalogue needs a flag that keeps controlled items out of the delivery basket. Telepharmacy also requires patients to see all transaction and delivery costs in advance. The storefront side is covered on our pharmacy website design page.

Records access, Arabic and advertising inside the app

Patients judge a healthcare app on whether they can find results and prescriptions without calling. DHA expects telehealth encounters to be documented and made accessible to the patient and authorised providers as needed. Decide with your medical director which items appear, whether results show immediately or after review, and how guardians reach a child’s record.

DHA also says teleconsultation should be offered in at least Arabic and English, in a language the patient easily understands. Our team builds Arabic and English apps with proper right to left layouts, including consent and escalation screens, where translated healthcare apps in Dubai most often break during development. Our guide to Arabic website development explains the layout issues.

Section 7.3 says any advertisement for telehealth services or within a platform must comply with MOHAP medical advertisement requirements and DHA standards for medical advertisement content on social media. Banners and push campaigns need the same review as your website; our healthcare website design page covers health advertising permits.

Questions to put to any healthcare app developer in Dubai

Process, platform choice and budget are covered in our guide to mobile app cost. For healthcare app development in Dubai, ask every developer these:

  1. Is this a facility app or a telehealth platform under DHA section 7, and who submits it for assessment?
  2. Which UAE provider holds patient data, recordings and backups, and how are notifications and logs kept free of health data?
  3. How is consent versioned, tied to three identifiers and retrieved for an audit?
  4. Which EHR will the app integrate with, and does it already submit to NABIDH?
  5. Where does the out of pocket estimate appear after the eligibility check?
  6. Who maintains the list of medicines blocked from teleprescribing and delivery?
  7. How will records meet the 25 year minimum if you later change developer?

If several answers are “we have not done that”, a smaller first release is safer; our guide to building an MVP app explains how to cut scope without cutting what a regulator checks.

How Digital Marketing Dubai can help

Our team designs and builds patient, clinician and admin apps for providers in Dubai and across the UAE, working with your medical director, licensing adviser and EHR vendor. We map each journey against the rules above, so the scope you approve already reflects what DHA, DOH or MOHAP will check. Single clinics often start with booking and reminders, which pairs with clinic website design; groups and platforms usually need telemedicine and integrations from the first release.

We do not promise approvals or launch dates, because those depend on the regulator. We provide a clear written scope and a fixed price proposal, usually within 45 minutes during business hours, and you own the code and accounts. Start with our mobile app development service, and we will tell you which parts of your healthcare app development brief for Dubai carry regulatory weight.

Straight answers

Frequently asked questions

Does a clinic appointment app in Dubai need its own DHA licence?

A booking app that only lets patients reserve an in person visit at a licensed clinic is a different thing from a telehealth platform. Once the app carries remote consultations, the DHA Standards for Telehealth Services treat it as a telehealth platform that DHA must assess and approve before launch. Ask DHA or your licensing consultant which category your exact feature list falls into.

Can we host our healthcare app on a cloud region in Europe or the US?

For health data linked to services delivered in the UAE, Federal Law No. 2 of 2019 says it may not be stored or processed outside the country unless a health authority resolution allows it. DHA's telehealth standard adds that data should sit with a cloud provider certified by the Dubai Electronic Security Centre. Plan for UAE hosting from day one rather than migrating later.

Can a telemedicine app prescribe any medicine?

No. The DHA telehealth standard excludes prescribing narcotic, controlled and semi controlled medication through telehealth, and says patients must be told which medication groups cannot be prescribed remotely. The app should make those limits visible before a consultation, not after it.

Does the app have to be in Arabic?

DHA says teleconsultation should be offered in at least Arabic and English, and encourages providers to tell patients which languages are available. In practice that means a properly mirrored Arabic interface, Arabic consent text and Arabic notifications, not a translated menu on an English layout.

Can patients see their records inside the app?

DHA expects telehealth encounters to be documented and made accessible to the patient and authorised providers as needed. How much of the full record you expose, and how quickly results appear, is a clinical governance decision. Agree it with your medical director before the screens are designed.

Fixed price, in writing

Send your brief. Get a scope and a price within 45 minutes.

  • One fixed number, agreed in writing before work starts
  • No obligation, and no pressure to sign
  • English and Arabic work, with proper right to left layout
  • One team for design, marketing, web, media and copy

Get your fixed price quote

Written scope and price within 45 minutes in business hours. No obligation.

By sending this you agree to be contacted about your enquiry. Privacy policy

Keep reading

More articles for UAE businesses

All articles
Call WhatsApp Get a quote