
ByAhsan Nadeem@ashtech52Lead Full-Stack Engineer
2026 vendor estimates put telehealth app development cost anywhere from $25,000 to over $700,000, because they aren't pricing the same product. For a first version with video, booking and US privacy work, expect roughly $60,000 to $180,000. Our own worked example comes to about $122,000 to build, then $43,000 to $84,000 a year to run at 5,000 visits a month.
All of these are estimates, and your scope will move them. Before you write a feature list, settle where you'll operate, how care will be delivered and which systems you must connect to.
This article covers building the software only. Licensing, clinical governance and legal questions belong with your own advisers. If you're planning a first release, our MVP app development service starts from the same three questions.
Telehealth app development cost: what the estimates say, and why they disagree
Almost every public figure comes from a company selling telehealth builds. We sell app builds too, so read our numbers the same way. They're still useful once you line them up by scope.
Two 2026 estimates for a "full platform" with video, records integration and e-prescribing show the problem:
- Chop Dawg: $75,000 to $150,000 or more.
- Attract Group: $300,000 to $700,000 or more.
Attract's tier also includes remote monitoring, analytics and multi-provider access controls. It assumes a team of 5 to 10 people. So these aren't two prices for one product.
The bands can also fail their own arithmetic. Chop Dawg puts a HIPAA-ready MVP at $25,000 to $60,000, but its seven module prices add up to $76,000 to $210,000. That MVP is scheduling, messaging or a single-purpose portal, so it may have no video at all. Taction Software states no hourly rate, team size or location for its estimates.
Ask what's in the number before you compare it with anything.
Telemedicine app development cost by scope
These are vendor estimates, labelled by source and date. Search treats telehealth and telemedicine as the same thing, and so do these vendors.
Scope | Chop Dawg, Jul 2026 | Taction, Jan 2026 | Attract Group, Jun 2026 |
|---|---|---|---|
First version | $25,000 to $60,000 (may exclude video) | $60,000 to $100,000 | $80,000 to $180,000 (scheduling and video) |
Fuller product | Not stated | $100,000 to $200,000 | $150,000 to $300,000 (adds messaging, payments, audit logs, consent) |
Integrated platform | $75,000 to $150,000+ | $200,000 to $300,000+ | $300,000 to $700,000+ |
Time for first version | 4 to 7 months | 3 to 4 months | 3 to 5 months in its table; 5 to 12 from discovery to launch in its text |
Module figures vary too:
Module | Vendor estimates |
|---|---|
Secure video | $10,000 to $40,000 (Taction); $12,000 to $35,000 (Chop Dawg) |
HIPAA engineering | $15,000 to $40,000 (Taction, Chop Dawg); 15% to 30% on top of a comparable app (Attract) |
Each electronic health record (EHR) integration | $15,000 to $80,000 (Taction); $15,000 to $45,000+ (Chop Dawg); $30,000 to $80,000+ (Attract) |
E-prescribing | $10,000 to $25,000 (Taction); $10,000 to $30,000 (Chop Dawg); $40,000 to $100,000 (Attract) |
Discovery | $15,000 to $30,000 (Attract) |
E-prescribing shows the widest spread, with a tenfold gap between the lowest and highest figures. If it's in your scope, ask exactly what the price covers.
The four decisions that move the budget
Work through these before you ask for a quote. Each one adds or removes real engineering work.
Decision | Options | Budget effect |
|---|---|---|
Market | US, UK or NHS, UAE or several | Sets privacy, hosting and approval work. Each extra market can mean separate infrastructure |
Care model | Live video, messaging, remote monitoring, prescribing | Monitoring and prescribing push you into the top tier |
Integrations | None, read-only records, two-way records, payments | Taction's Epic estimates run from $18,000 to $28,000 for read-only, up to $55,000 to $80,000 for a full suite |
Platform | Web, cross-platform, native | Attract says cross-platform saves 20% to 35% on the first build |
Before any of this: do you need to build at all?
Attract cites off-the-shelf telehealth software at $30 to $300 or more per provider per month. Ten clinicians at $300 is $36,000 a year, less than running costs alone in our worked example. If you're one clinic group offering standard video visits, try buying first. Building makes more sense when the care model or the patient experience is the product.
The other big saving comes from sequence. A well-scoped project can launch with no records integration and add one after the clinical workflow is proven. Just design the data model and access rules for it from the start. Attract estimates that retrofitting HIPAA work later costs 40% to 60% of the original build, and although that's a vendor figure, the logic holds: audit logs and access rules are hard to add afterwards.
Compliance as software work: US, UK and UAE
This table covers what affects your build. It isn't legal advice, so confirm each point with the official source and your advisers.
Market | What to build for | Status to check |
|---|---|---|
US: HIPAA | Unique user IDs, audit controls, access controls, encryption decisions, written business associate contracts with vendors, 6-year retention of security documentation | Proposed Security Rule changes are not final |
UK: NHS buyers | DCB0129 clinical risk management, DTAC evidence on clinical safety, data protection, technical assurance, interoperability, usability and accessibility | New DTAC form in use since April 2026 |
UAE: Dubai | DHA approval, UAE hosting at a DESC-certified provider, Tier 3 data centres, ISO 27001, Nabidh integration | Version 4 of DHA's standard, effective 26 November 2025 |
UAE: elsewhere | Abu Dhabi's DOH and federal MOHAP rules differ; a UAE law firm also names Malaffi and Riyati as exchanges | We couldn't read DOH's standard; confirm with DOH |
United States
The current technical safeguards treat encryption as "addressable", not automatically required. Build it anyway. In January 2025 HHS proposed removing that distinction, encrypting all electronic health data at rest and in transit with limited exceptions, requiring multi-factor authentication and adding regular vulnerability scans.
It's only a proposal. A law firm's summary says the 2026 federal regulatory agenda projects final action for July 2027, and a July 2026 trade report says the same. Those dates are estimates. Since most of it is sensible engineering anyway, building to it now avoids paying twice. Passkey sign-in is one way to handle strong authentication for patients and staff.
Any vendor handling patient data for you needs a written contract with the right assurances. And the free pass from the pandemic has gone: the telehealth enforcement discretion fully ended on 9 August 2023, so consumer video tools without those contracts are no longer a shortcut.
United Kingdom
DTAC isn't a certificate. NHS guidance calls it best practice that is not legally required, but NHS buyers review it during procurement, so in practice you need it to sell to them. NHS England refreshed the form in March 2026 with 25% fewer questions, retiring the old one by 6 April.
DCB0129 is different. The same NHS service marks it as legally required for developers, and it means running a clinical risk management system. If your app could count as a medical device, check MHRA's guidance early. DTAC can then ask for proof of a UKCA mark.
Dubai and the UAE
This is where the budget can surprise a US-centred team. We read DHA's Standards for Telehealth Services, Version 4, and it has clauses that most cost guides skip:
- 7.6.2: platforms must be assessed and approved by DHA before going live or to market.
- 7.6.3: you need legal representation in Dubai.
- 7.6.7: data sits on a server at a DESC-certified cloud provider in the UAE, in data centres of at least Tier 3.
- 7.6.7 again: platforms need ISO 27001 and "HIPAA compliance certification", with HITRUST or SOC 2 possible in some conditions.
- 7.8: a platform licence doesn't let you deliver clinical care or recruit clinicians to do so.
- 7.9.1: the records system must integrate with Nabidh, Dubai's health data exchange.
- 10.6.2: AI tools need documented clinical validation, disclosure and consent.
Two consequences follow, and both are our reading of the text, so check them with DHA.
First, HHS says it doesn't certify anyone or anything as "HIPAA compliant". Ask DHA which evidence it accepts before you pay for a private assessment.
Second, the standard restricts storing or transferring health data outside the UAE, except as allowed by Ministerial Decision 51 of 2021 (clause 7.6.7) or, under clause 8.2.5, with DHA's approval. That affects your video provider, push notifications, analytics and error logging, not only your main database. Ask every vendor where media and logs actually go. A UAE law firm also reports a retention period of at least 25 years under federal law.
Running costs: video is under a quarter of the bill
Video feels like the big running cost. It usually isn't.
Assume 5,000 visits a month, 20 minutes each, with 2 people on each call. That's 200,000 participant minutes. At vendors' list prices on 4 November 2026:
Provider | Price | At 500 visits a month | At 5,000 visits a month |
|---|---|---|---|
$0.004 per participant minute | $80 | $800 | |
$10.99 plan, $16.99 HIPAA add-on, $0.0042 after 2,000 minutes | $104 | $860 | |
$0.004 after 10,000 free minutes, $500 HIPAA add-on | $540 | $1,260 |
Check three things before relying on this table:
- Flat fees matter at low volume. Daily's add-on makes it the dearest here, while higher volume tiers can bring its rate down.
- The business associate agreement (BAA) may change the price. Twilio says Video is HIPAA eligible and that it can sign a BAA. Whereby, a competitor, says that takes an enterprise plan. We couldn't confirm that with Twilio, so ask before budgeting $800.
- Recording costs extra. At 100,000 minutes of recorded calls with 2 people on each, Twilio adds $800 for tracks plus $1,000 for composed files. Daily adds $1,349 before storage. Record only if your care model needs it.
Twilio's status worries some buyers, because it announced an end of life for Video and then reversed it in October 2024. Its FAQ now says the product is under active development and taking new customers.
Here's a monthly running budget for the worked example below:
Item | Low | High | Basis |
|---|---|---|---|
Video | $860 | $1,260 | Table above |
Hosting | $500 | $1,500 | Taction: $6,000 to $18,000 a year |
Upkeep | $1,524 | $2,540 | Attract: 15% to 25% of build a year |
Risk assessment and penetration test | $667 | $1,667 | Taction: $8,000 to $20,000 a year |
Total a month | $3,551 | $6,967 | |
Total a year | $42,605 | $83,595 |
That's $0.71 to $1.39 a visit. Video is under a quarter of the low case and under a fifth of the high case. Clinician pay, patient support, marketing and legal fees are all extra. Taction's own running estimate, $30,000 to $80,000 a year, lands close by.
A first version for about $122,000, line by line
This is our estimate for a US-only launch: live video follow-up visits, patient and clinician apps from one cross-platform codebase, no records integration and no prescribing. The $600 a person-day is illustrative, not a ZNova quote. Replace it, and the days, with your own.
Work | Person-days | Cost |
|---|---|---|
Discovery and workflow mapping | 15 | $9,000 |
Patient and clinician apps, sign-in, profiles | 35 | $21,000 |
Booking and reminders | 15 | $9,000 |
Video integration through an API | 15 | $9,000 |
Secure messaging and documents | 15 | $9,000 |
Visit notes and admin panel | 20 | $12,000 |
Security and compliance engineering | 25 | $15,000 |
Testing and release | 20 | $12,000 |
Subtotal | 160 | $96,000 |
External penetration test (Attract's low end) | $10,000 | |
Contingency at 15% | $15,900 | |
Total build | $121,900 |
With the running budget above, year one comes to about $165,000 to $205,000. The build sits inside Attract's first-version range and above Taction's. Both come from sellers of this work, so that's no proof. For how we think about first releases generally, see SaaS MVP development cost.
Then add what your scope needs. The first two rows are our estimates, and they cover engineering only:
Add-on | Estimate | Not included |
|---|---|---|
Selling to the NHS: clinical risk file, DTAC evidence, accessibility work | $15,000 (25 days) | Clinical safety staff, any medical device route |
Launching in Dubai: UAE hosting, Nabidh, vendor changes | $24,000 (40 days) | ISO 27001, DHA licensing, Dubai representation; we found no reliable public cost |
One Epic integration, two-way | $35,000 to $55,000 (Taction, vendor) | EHR programme fees |
E-prescribing | $10,000 to $100,000 (vendors, see above) | Network fees: Taction cites $3,000 to $8,000 a year |
We couldn't verify current Epic or Oracle Health programme fees. The public figures are old or conflict, so get them in writing. US rules do limit what certified API developers can charge and require patient-access addresses to be published free, but that doesn't make the integration work free.
Native, cross-platform or PWA for a first version
Taction lists $10,000 to $25,000 for web only, $15,000 to $40,000 for React Native or Flutter, and $25,000 to $70,000 for native.
- Web or PWA: a good test for clinician-led follow-ups. On iPhone, camera and microphone work while the app is open, but push notifications need a Home Screen install, which many patients won't do. Our PWA on iPhone guide has the details.
- Cross-platform: the sensible default when patients need reminders you can rely on. One codebase, two apps.
- Native: worth paying for when real-time performance is critical, since Attract says cross-platform builds may limit it. Separately, an iPhone PWA can't reach Bluetooth, so monitoring with Bluetooth devices rules that option out.
Allow for store review too. Attract estimates 2 to 4 weeks at Apple for health apps, which is a vendor's figure and worth checking against your own launch plan.
How to compare telehealth quotes
Send every supplier the same one-page brief, covering market, care model, integrations and expected visits a month. Then check each quote for these:
- Is the scope written down? Named features, user roles and the number of systems integrated.
- Does it state days and rates? A total without them can't be compared.
- Who signs which contracts? List every vendor that touches patient data, and which BAA or data agreement covers it.
- What's in the compliance line? Audit logs and access rules are engineering. Risk assessment, policies and penetration tests are often separate.
- Where does data live? Include video media, logs, analytics and backups, particularly for the UAE.
- Is testing included? How many penetration test rounds, and who fixes the findings?
- What's the running budget? Ask for a 12-month estimate at your expected visit volume.
- What's left out? App store accounts, support desk, clinical safety staff and programme fees.
- Who owns it? Code, infrastructure accounts and documentation should be yours at handover.
A low quote with these answered is better than a high one without. A low quote without them usually means the work has moved to you.
Frequently asked questions
How much does it cost to build a telehealth app?
Vendor estimates for a first version with video run from about $60,000 to $180,000, and integrated platforms from $75,000 to over $700,000, depending on scope. Our worked example is about $122,000 to build, assuming a US launch with no records integration, and $43,000 to $84,000 a year to run at 5,000 visits a month.
How long does it take to build a telehealth app?
Vendors estimate 3 to 7 months for a first version, and 7 to 16 months for a platform with records integration and prescribing. Attract's fuller count from discovery to launch is longer, at 5 to 12 and 10 to 18 months. Discovery, security testing, store review and pilots all take time. In Dubai, allow for DHA's assessment before launch too.
How much does HIPAA compliance add to a telehealth app?
Vendors estimate $15,000 to $40,000 of build work, or 15% to 30% over a comparable app, plus $8,000 to $20,000 a year for assessments and testing. Those are vendor figures. Attract estimates retrofitting costs 40% to 60% of the original build, so plan for it from the first sprint.
Does a telehealth app need NHS DTAC approval?
DTAC isn't an approval or a legal requirement. NHS guidance calls it best practice, but NHS buyers review it during procurement, so you'll need it to sell to them. DCB0129 clinical risk management is marked as legally required for developers. Confirm your route with the NHS organisation buying from you.
Which video API has a BAA?
Twilio says it can sign one for HIPAA-eligible Video. Daily includes a BAA in its $500 a month healthcare add-on. Whereby offers one with its $16.99 add-on on the Build plan. A Whereby comparison also lists Zoom and Vonage as offering BAAs, through sales. Check the exact features each BAA covers.
Can we start with a web app instead of native?
Often, yes. A web app or PWA can handle video visits, and on iPhone the camera and microphone work while it's open. The catches are push notifications, which need a Home Screen install, and Bluetooth, which isn't available. If you rely on either, choose a cross-platform or native app.
Planning a first version? Bring your market and care model. Book a free consultation and we'll help you turn them into a scoped budget, including whether to buy instead. We build the software; your clinical and legal advisers remain the authority on the rules.
Sources
- 45 CFR 164.312, technical safeguards (Cornell LII copy)
- 45 CFR 164.502, business associate assurances (Cornell LII copy)
- 45 CFR 164.316, documentation retention (Cornell LII copy)
- 45 CFR 170.404, certified API conditions (Cornell LII copy)
- HHS, HIPAA Security Rule notice of proposed rulemaking, Federal Register (6 January 2025)
- HHS, guidance on misleading HIPAA marketing
- Physicians Practice, HIPAA Security Rule postponed (trade press, 2026)
- McDermott, final action on HIPAA Security Rule modifications projected for July 2027 (law firm, 16 July 2026)
- HIPAA Journal, telehealth enforcement discretion transition ends (trade press)
- NHS Innovation Service, updated DTAC form and guidance (4 March 2026)
- AI and Digital Regulations Service, using the DTAC (read 4 November 2026)
- AI and Digital Regulations Service, clinical risk management standards
- MHRA, medical devices: software applications (updated 1 July 2023)
- Dubai Health Authority, Standards for Telehealth Services, Version 4 (effective 26 November 2025)
- Kayrouz & Associates, licensing and data rules for telehealth providers in the UAE (law firm, 26 June 2026)
- Twilio, Video pricing (vendor, read 4 November 2026)
- Twilio, Video FAQ (vendor)
- Daily, Video SDK pricing (vendor, read 4 November 2026)
- Whereby, Embedded pricing (vendor, read 4 November 2026)
- Whereby, HIPAA-compliant video call APIs compared (vendor, 12 May 2026)
- Taction Software, telemedicine app development cost (vendor, 15 January 2026)
- Attract Group, telemedicine app development cost (vendor, 30 June 2026)
- Chop Dawg, cost of a healthcare or telemedicine app (vendor, 29 July 2026)



