Skip to main content

Product preview · Fictional patient data

OvaFlow
Try the sandboxRequest a walkthrough

iPhone system surfaces

Counts at a glance. Names stay inside.

Concepts for iOS Home Screen and Lock Screen widgets, ActivityKit Live Activities, the Dynamic Island, and the watchOS Smart Stack—built so ambient surfaces show queue counts and active recording timers while keeping patient names off locked screens.

Design prototype
Watch the walkthroughsAll surfaces
Thursday, October 2910:41
OvaFlowStart a noteUnlock to choose the encounter
OvaFlowStopped · 04:32Microphone off · clinical details hidden
No patient details on this screen.
LockedThe recording's state and a shortcut. No names, no visit details.
OvaFlow
Unlocked with Face ID
Maya ChenConsultation · 09:00
Visit noteRecording stopped · 04:32Microphone off
Saved in OvaFlowSaved on iPhonePlaced in EMRNot yet
Desktop handoff pending · draft retained
Next stepReview and place it at the deskNothing reaches the EMR until a person places it there.
After Face IDThe visit opens inside the app. Saved in OvaFlow is never shown as placed in the EMR.
Locked: no patient details
Design prototype · Fictional patient data

What it's for

Glanceable, never revealing.

Counts at a glance, no names on the Lock Screen, Face ID before details. Clinicians who glance at their phone between patients.

  1. Home and Lock Screen

    Queue counts and staleness timestamps when unlocked; patient names and cycle details hidden on the Lock Screen by default until Face ID succeeds.

  2. Live Activity and Dynamic Island

    An persistent capture timer and amber microphone indicator in Compact and Expanded Dynamic Island views so recording is never forgotten.

  3. Watch Smart Stack

    Active capture state at a glance in the watchOS Smart Stack and a one-tap corner complication to launch a new voice memo.

Who it's designed for

Capabilities you see here

Recording, always visible

A recording you can always see, with nothing about the patient.

The Dynamic Island and Live Activity show that capture is running and for how long. Clinical details stay inside the authenticated app.

04:32Recording04:32Visit note · clinical details hiddenOpen recording
  • CompactA recording dot and the elapsed time.
  • Expanded“Visit note · clinical details hidden” and a direct way back to the app.
  • Changing a recordingPausing or stopping from the Lock Screen asks you to unlock first.

At a glance

Home Screen, Lock Screen, Live Activity, Dynamic Island.

The recorded design prototype, in order. Home Screen widgets start a confirmed note or open drafts; patient details stay in the app.

iOS widgets, Lock Screen Live Activity and Dynamic Island (design prototype), each designed to hide clinical details at a glance.
  1. Home Screen widgets start a confirmed note or open drafts. Patient details stay inside the app.
  2. The Lock Screen shortcut shows no patient details and asks to unlock first.
  3. A Live Activity shows recording status with clinical details hidden.
  4. The Dynamic Island keeps a generic recording status and a direct way back to the app.
  1. Home Screen widgets start a confirmed note or open drafts. Patient details stay inside the app.
  2. The Lock Screen shortcut shows no patient details and asks to unlock first.
  3. A Live Activity shows recording status with clinical details hidden.
  4. The Dynamic Island keeps a generic recording status and a direct way back to the app.
  5. Offline, the widget says when it last synced and keeps the draft: “Offline. Draft retained.”

Device anatomy & visibility matrix

iOS system surfaces anatomy: Dynamic Island, Lock Screen, Home Screen & Smart Stack

Apple's system surfaces—Lock Screen widgets, Home Screen widgets, ActivityKit Live Activities, the Dynamic Island and the watchOS Smart Stack [3][4][5]—are visible before an app is even opened. Our design prototype treats every locked pixel as public space.

Design prototype · iOS Lock Screen, Dynamic Island Live Activities, Home Screen & watchOS Smart Stack

Worked system-surfaces trace: active mic visibility, locked redaction & offline truth

The iOS and watchOS system-surfaces walkthrough steps through every ambient glance state to show how lock-screen privacy and draft status stay honest.

  1. 11:06 (24h)Dr. Mira Lee, MD

    Surface 01 · Dynamic Island Live Activity [4]

    While capturing a consented consult on iPhone, Dr. Lee switches to another reference app. The Dynamic Island keeps an amber microphone icon and live timer pinned at the top of the screen.

    Screen boundary

    Continuous visual indicator prevents forgetting an active recording.

  2. 11:14 (24h)Dr. Mira Lee, MD

    Surface 02 · Locked Lock Screen widget [3]

    With the iPhone resting on the counter in locked state, the Lock Screen widget shows “2 drafts · 1 handoff” with patient names redacted.

    Screen boundary

    Tapping the widget requires Face ID before revealing Maya Chen's or Elena Rivera's name.

  3. 11:19 (24h)Dr. Mira Lee, MD

    Surface 03 · Unlocked Home Screen widget [3]

    After Face ID unlocks the phone, the medium Home Screen widget shows 1 note “Saved in OvaFlow (needs desk placement)” and 1 note “Placed in EMR”.

    Screen boundary

    Widget copy never conflates an unplaced OvaFlow draft with a verified EMR chart entry.

  4. 11:25 (24h)Dr. Mira Lee, MD

    Surface 04 · Offline staleness indicator

    In a shielded imaging corridor without service, the widget header switches from live status to “Offline · last synced 11:19”.

    Screen boundary

    Explicit staleness timestamp prevents trusting an outdated “0 urgent items” count.

iOS and watchOS system surfaces flow. Dynamic Island and Live Activities keep active recording visible at all times [4]; Lock Screen widgets show counts only and redact names until Face ID succeeds [3]; Home Screen widgets distinguish “Saved in OvaFlow” from “Placed in EMR” and show an honest offline timestamp.
Visibility table, explicit boundaries & glossaryWhat shows where across Widgets & Live Activities & what never happens on Widgets & Live ActivitiesSub-surface visibility table, what Widgets & Live Activities does and never does, and related safeguard terms.
What shows where across Widgets & Live Activities
Sub-surface / stateWhat is shownWhat is hidden or redactedAllowed actionStays at the desk or EMR
iPhone Lock Screen widget (locked) [3]Numeric queue counts (e.g., “3 items need action · 1 handoff offer”) and last-synced clock time.All patient names, MRNs, medication names and cycle stages are hidden by default [3].Tap widget → prompts Face ID / Touch ID before opening the clinician iPhone app.All clinical chart review and documentation.
Dynamic Island Compact & Minimal views [4]Amber microphone glyph and live elapsed recording timer (e.g., “01:24”) at the top of iPhone.Patient name stays hidden in Compact/Minimal pills so shoulder-surfers see only the timer.Long-press or tap after authentication to pause or finish room capture.Note review, placement and EMR save verification.
Dynamic Island Expanded & Lock Screen Live Activity [4]Active capture state, elapsed timer, pause/stop controls (gated by Face ID when locked).When locked, patient identity is redacted to “Active visit capture · Face ID to view”.Guarantees a clinician never forgets an open microphone in their pocket.Transcript comparison and chart commit.
Unlocked iPhone Home Screen widget [3]Queue summary, explicit “Saved in OvaFlow” vs. “Placed in EMR” draft counts, and staleness badge.If offline for 12 minutes, displays “Offline · as of 14:18” instead of pretending counts are live.Jump directly to the unsigned draft queue or on-call handoff list.Final EMR Save and readback verification at the desk.
watchOS Smart Stack & corner complication [5]One-tap voice capture launcher and count of notes waiting on the Watch.Zero patient names in the complication ring or dimmed Smart Stack card [5].Raise wrist and tap complication to open the encounter confirmation screen.All chart edits and clinical approvals.

Designed to do on Widgets & Live Activities

What belongs on this screen

  • Redacts all patient names and cycle details on the iPhone Lock Screen and dimmed Apple Watch Smart Stack by default.
  • Requires Face ID or Touch ID before opening patient details or stopping/changing a recording from a locked screen.
  • Keeps an unmistakable amber microphone indicator and timer in the Dynamic Island whenever capture is active.
  • Labels offline widget counts with the exact minute they were last synced rather than faking a live connection.

Explicit boundary

What never happens on Widgets & Live Activities

  • Never renders patient names, diagnoses, hormone values or medication instructions on a locked Lock Screen.
  • Never labels a draft “Done” or “Charted” on a widget when it is only saved inside OvaFlow.
  • Never allows a one-tap widget action on a locked phone to approve an order or accept a handoff without biometric unlock.
  • Never hides an active room microphone behind a silent background process.

Questions

Common questions about Widgets & Live Activities

Frequently asked questions4 questions on Widgets & Live Activities privacy, boundaries and rollout timing
Why shouldn't a Lock Screen widget show the next patient's name or room number?

A clinician's phone sits face-up on counters, nursing stations and exam tables throughout the day. Apple's WidgetKit privacy redaction APIs allow widgets to show useful operational counts while locked and reveal patient names only after Face ID confirms the clinician is looking at the screen.

What is the difference between “Saved in OvaFlow” and “Placed in EMR” on the Home Screen widget?

“Saved in OvaFlow” means a voice capture or draft has been saved in the companion app and still needs a clinician to place and save it in the EMR at the desk. “Placed in EMR” means the text was placed and verified in the chart.

How does the Dynamic Island prevent accidental recording?

Whenever an in-room recording is active, ActivityKit pins a Live Activity in the Dynamic Island (and on the Lock Screen) with an amber microphone badge and running timer, so the clinician and patient always see that capture is in progress.

What is the maturity status of Widgets & Live Activities?

They are design prototypes that would ship alongside a future clinician iPhone app in a later, separately justified product phase.

Platform standards & referencesPublic platform documentation cited on this page (3 verified sources)Apple Human Interface Guidelines, WidgetKit, ActivityKit, watchOS, Windows UIA and Citrix ICA documentation.
  1. [3]

    Apple Developer Documentation · WidgetKit — Home Screen, Lock Screen & Smart Stack Privacy Redaction (verified 2026-11-03)

    Apple framework documentation for glanceable widgets and privacy-sensitive Lock Screen redaction.

  2. [4]

    Apple Developer Documentation · ActivityKit & Human Interface Guidelines — Live Activities and Dynamic Island (verified 2026-11-03)

    Design and system rules for Compact, Minimal and Expanded Dynamic Island and Lock Screen Live Activity views.

  3. [5]

    Apple Developer Documentation · Human Interface Guidelines — Designing for watchOS & Always-On Display (verified 2026-11-03)

    Apple platform norms for wrist-raise interaction, Always-On Display dimming and redacting sensitive details when the wrist drops.

In the walkthroughs

What you can watch it do.

Design prototype

Widgets and Live Activities would arrive with an iPhone app, a later and separately justified step on the same product model.

  1. Redacted Lock Screen by default
  2. Face ID before details or recording changes
  3. “Saved in OvaFlow” versus “Placed in EMR”
  4. An honest last-synced time when offline
  5. Persistent Dynamic Island indicator while a room microphone is open

Walkthroughs

Widgets & Live Activities, recorded.

Recordings of the interactive design prototype with fictional patients. Open one to play it with chapters and captions.

Next step

See what a glance can hold.

We'll go through the widget and Live Activity designs, and what each keeps off the Lock Screen. Fictional records only; please don't send patient data.

Request a walkthroughTry the sandbox