The Smartphone in Digital Endpoints
Indispensable conduit, immature instrument — the phone’s role in capturing, processing and submitting digital endpoint data
REGULATORY OPERATIONSTreat the phone as two things, not one: sometimes the measuring instrument, far more often the conduit that carries another sensor's data.
The two roles carry different evidence burdens, and conflating them is the costliest error in endpoint planning. Separate sensor from conduit in every endpoint definition; validate the conduit as data integrity, not as measurement; and reserve a full V3 package — and any attempt at qualification — for phone-native measures that carry real programme value.
The same V3 lens, two very different burdens
Phone as sensor — the instrument
- Its own accelerometer, camera, microphone or GPS generates the endpoint
- Verification, analytical and clinical validation all fall on the phone — a full V3 package, de novo
- Usability burden high: the participant operates the measuring device directly
- Outside accelerometer activity and camera-PPG heart rate, most phone-native measures are emerging or research-grade
Phone as conduit — the data path
- Up to eight roles: relay, store-and-forward, cloud uplink, edge processing, provenance, device controller
- Seven of the eight are data-integrity obligations, not measurement obligations
- Edge-algorithm version becomes part of the endpoint definition — version-lock it
- BYOD does not change the roles; it changes who controls them — detect, capture and reconcile instead of control
Four questions sponsors collapse into one — and must keep apart
A phone is not a device by virtue of being a phone. The software function running on it can be — assessed one function at a time, on intended use and claims.
In the US, whether an IDE is required and whether the investigation is significant-risk under 21 CFR Part 812 — a judgment on the facts, not on the app's sophistication.
A V3 and context-of-use question, independent of device status. Clearance enables measurement; it does not confer endpoint qualification.
Always. 21 CFR Part 11, EMA/INS/GCP/112288/2023 and ICH E6(R3) reach trial data whatever the device status — a reminder app included.
Six actions, ordered by the evidence they save at protocol design
- 1Separate sensor from conduit in every endpoint definition — the first question sets the whole evidence path.
- 2Classify each phone software function early (device or not) and keep the four questions separate.
- 3Validate the conduit roles as data integrity: edge-algorithm version, provenance, store-and-forward and reconciliation.
- 4Plan a full V3 package for phone-as-sensor; reserve phone-native primary endpoints for measures with established validation.
- 5Specify the connectivity topology, failure modes and reconciliation method in the protocol.
- 6Pursue qualification selectively — only for high-value phone-native candidates.
FDA DHT guidance (Dec 2023) · FDA Device Software Functions policy (2022) · 21 CFR Part 11 and Part 812 · EMA/INS/GCP/112288/2023 · ICH E6(R3) · MDCG 2019-11 Rev. 1 · EMA SV95C qualification opinions (2019, 2023)
© qointa 2026 – Public – Uncontrolled when printed · Not legal advice; this summary does not classify any device.
sales@qointa.com · qointa.com
More from the library
Digital Health Technologies in Clinical Trials — A Regulatory Position-Paper Series
One device, several perimeters: a framework for assessing the regulatory impact of the technologies a trial relies on.
Read more →Who Is the Manufacturer? Economic-Operator Roles in DHT Supply Chains
How provisioning, importing, kitting and modifying a device assign manufacturer, importer and distributor duties — often by operation of law.
Read more →You Can Delegate the Work, Not the Accountability: Vendor Qualification and Oversight under ICH E6(R3)
The sponsor’s duty to qualify and oversee its DHT vendors — distinct from who holds the economic-operator role.
Read more →Talk to a specialist
Bring one device and one protocol — a wearable, a sensor, an app, anything. We will tell you which regulatory perimeters it opens and what it takes to close them.
Book a 15-minute call