I don't want to know my user's email so my app would be able to record de-identified data and not need to be HIPAA compliant

As long as it’s their own token, in the Users table, within user protected rows -

It should be fine?
Do I have to be concerned about the WiFi being sniffed since the data is not encrypted?

I can’t advise on HIPAA compliance as I’m not a medical lawyer. Glide does not claim to be HIPPA compliant and I believe any attempt to use HIPPA protected data with a Glide app goes against their terms and conditions.

For those reasons alone, I would not attempt any kind of workaround.

In general I would say that Glide data is secure and securely transferred between server and end user, but once it’s on the end user’s device, then it’s wide open for snooping.

2 Likes

Fair and True