Approov gives us strong, reliable assurance that only genuine instances of our app are talking to our APIs. That’s absolutely essential when we’re protecting sensitive health data and rewarding healthy behavior. The integration was clean, the support was excellent, and we now have a mobile API security model we can trust.
'- Peter Paddock, Digital and Mobile Solutions Architect, Vitality'
The Challenge
With a growing base of highly engaged users and increasing integration with consumer health devices, Vitality faced several challenges:
- Ensuring API access only from genuine apps.
- Preventing mobile API abuse and reward fraud.
- Maintaining data integrity across iOS, Android, and Apple Watch.
- Securing high-value personal health data from interception or manipulation.
Apple Watch is particularly important, with a flagship program that rewards active members with a subsidized device. Because activity directly drives financial rewards, accurate, tamper-proof data is essential to the program’s fairness. At the same time, health and wellness data is highly valuable to criminals, fueling insurance fraud, identity theft, and targeted scams.
- Ensuring API access only from genuine apps.
- Preventing mobile API abuse and reward fraud.
- Maintaining data integrity across iOS, Android, and Apple Watch.
- Securing high-value personal health data from interception or manipulation.
Apple Watch is particularly important, with a flagship program that rewards active members with a subsidized device. Because activity directly drives financial rewards, accurate, tamper-proof data is essential to the program’s fairness. At the same time, health and wellness data is highly valuable to criminals, fueling insurance fraud, identity theft, and targeted scams.
With a strong defense against scripted attacks in place we haven’t encountered any issues regarding credential stuffing or other security breaches.
Read on
