Kaeda
Free · Sourced
← All cases
Doxy.me
HIPAA-compliant telehealth - USA - founded 2013 - no VC - about 1.5M providers in 176 countries
👤 Brandon Welch (Biomedical-informatics PhD - built it for his own clinical study, so he knew HIPAA cold and had real providers to test on.)🌐 siteLinkedIn

A grad student needed cheap HIPAA-compliant video, built his own, gave it away free, and rode COVID to 1.5M providers.

Will it work? · our read
Compliance as bait. It gave away HIPAA and a free BAA - the one thing rivals gated - turning a legal burden into a viral funnel. COVID did the rest. Risk: a giant bundling free compliant video.
01How the money moves
Provider signs up free - gets a HIPAA BAA and a personal room link in one click
Runs unlimited in-browser visits; grows to need group rooms, branding, analytics
Upgrades to Premium at about $35 per provider / month
02The numbers
1.5M
providers, 176 countries
founder '24
700K
signups in 2 pandemic mo
Utah Biz '21
$2.8M
total raised, no VC
Crunchbase
Revenue is media-estimated at $50M+ (2021); doxy.me discloses no official figure. Utah Business
About $50M+/yr (2021 media estimate); no official figure disclosed and no VC (about $2.8M in grants/prizes).
03Weight class — CENTStap an axis
ControlEntryNeedTimeScale
Control Mid
Owns brand + 30% share, but browser video and a BAA are copyable; a giant bundling free compliant video is the threat.
04The key move
Give HIPAA away free
Rivals gated HIPAA and the BAA behind paywalls - compliance is the costly, scary part. Doxy.me signed a free BAA and made the compliant tier free, so any clinician goes live in one click.
fact
The counter-intuitive move
The free-compliant edge is copyable: a distribution giant (Zoom, Teams) can sign a free BAA and bundle compliant video, erasing it overnight.
our read
05Where the moat is
Why HIPAA is the moat, not just the burden:
Free-tier signed BAA - rivals charge for compliance30% US telehealth share = default brandAnonymous P2P video, no PHI stored = trust1.5M providers embedded in daily workflow
06How it diesmedium confidence
The 2020 COVID waiver let providers use plain Zoom or FaceTime for PHI. Had that stayed, 'free + compliant' meant nothing. The waiver ended in 2023 - but a giant bundling a free BAA would still gut the wedge. our read
Show evidence · counter
Evidence: HHS OCR waived telehealth HIPAA enforcement in March 2020 and ended that flexibility in August 2023.
Counter: Enforcement's 2023 return restored the moat; rivals still charge for the BAA and lack doxy.me's anonymous, no-PHI-stored P2P trust.
07Against rivals
Doxy.meFree-$35
Zoom Healthcarepaid BAA
SimplePractice$49-99/mo
Amwell / Teladocenterprise
Bars = rough US telehealth mind-share, not exact figures. Doxy.me's edge is the free, already-compliant entry point. our read
08Who uses it
Solo therapistsSmall clinicsSpeech/PT/OTRural providersPsychiatrists
Would it work for you?
Where does a law make the scary part expensive - and what if you gave that part away free?
Which regulated niche still paywalls the 'compliance' piece you could hand out free? We don't score you — you answer.
🚀Use it as a launchpada prompt for your own AI
Copy → paste into your AI → then develop it freely in the conversation.
You are a sharp, honest startup strategist. Use the proven case below as a launchpad for MY idea — help me find my own angle, not copy it. <my_profile> Domain I know: [your domain] My unfair advantage (access/audience): [your edge] Interests: [your interests] Resources & goal: [your resources] · [your goal] </my_profile> <case name="Doxy.me" model="saas"> What it does: A free, HIPAA-compliant, in-browser telehealth room; clinics pay for multi-user tools, branding, routing, and analytics. Why it won (moat): The signed BAA sits in the free tier. Rivals treat compliance as a paid feature, so doxy.me owns the zero-friction, already-legal entry point. Weakest axis (CENTS): Video plus a BAA is commoditizable; the free-compliant edge holds only while giants choose not to bundle the same thing. How it could die: A distribution giant offering free HIPAA video with a BAA, or regulators permanently allowing consumer apps for PHI. </case> <task> Be a skeptical operator, not a cheerleader. No generic startup platitudes. If my angle is weak, say so plainly. First, a reality check: markets like this mostly fail. State the honest base rate (how crowded/hard is this?) and the ONE specific thing that would have to be true for ME to be the exception — grounded in my profile above. Then a compact table: - Fit — does this pattern suit my edge, or fight my gap? - Angle — my sharpest differentiation vs Doxy.me (concrete, not "better UX") - Distribution — exactly where my first 100 users come from (this is the hardest part — be specific, not "content marketing") - Risk — its "how it dies" (above) in MY situation Finish with one line: "The single thing to do next." Use only the facts above; if data is thin, say so — never invent numbers. Then stay with me and go deeper on whatever I ask — tech stack, rough cost & time, the smallest MVP to test, pricing, or timing. </task>
✓ Copied — paste into your AI
👤Placeholders like [your domain] auto-fill from your profile — example values for now.Set up profile →
Sourcesupdated · daily
Wikipedia: Doxy.me - founding, free-tier HIPAA compliance, provider counts.Utah Business (2021) - 'revenues in excess of $50 million', 30% share, COVID surge.Brandon Welch interview - freemium model, $30-35/mo, 1.5M providers.Crunchbase: Doxy.me - about $2.8M raised (grants/prizes), no VC round.AccountableHQ - free-tier BAA nuance and HIPAA detail.
Revenue '$50M+' and '30% share' come from a 2021 Utah Business report (media, not first-party); no filing or founder figure exists, so it is EST / unverified and likely stale. Bootstrapping is documented (no VC; about $2.8M in grants and prizes per Crunchbase). Founder-stated: freemium model, $30-35/mo, 1.5M providers, HIPAA origin story. Free-tier BAA is documented but varies by account type. The 'a giant could bundle it' risk is [our read], not a stated event. We never score you.