What changes when a device monitors patients
A remote patient monitoring (RPM) device, such as a connected blood pressure monitor, pulse oximeter, weight scale, thermometer or glucose meter, takes a measurement at home and sends it to a care team. Whether it is a medical device is decided by its intended use and the market it is sold in, not by its hardware. If it is one, the factory needs a quality system suited to medical devices (commonly ISO 13485), the design needs documented verification, and a named party must hold regulatory responsibility in each market.
Most manufacturing problems in RPM programs come from treating the product like consumer electronics for too long: a supplier swaps a component without notice, calibration records are incomplete, or nobody owns the regulatory file for the revision actually in production. Settle intended use, target markets and the division of responsibilities first. Supplier selection follows from those decisions. This page covers manufacturing considerations; classification and submissions belong with qualified regulatory specialists.
Intended use decides the rules
- United States. FDA regulates devices by classification. Common RPM measuring devices, such as non-invasive blood pressure monitors and pulse oximeters, are typically Class II, which usually means a 510(k) premarket notification. Connected devices also face FDA’s cybersecurity expectations in premarket submissions. Reimbursement rules for remote physiologic monitoring refer to the FDA’s definition of a medical device, so regulatory status is often a commercial question as well as a compliance one.
- European Union. Under the Medical Device Regulation (MDR), a device’s class follows from its intended purpose and the classification rules, and most monitoring devices need a notified body.
- Other markets have their own registration routes, and each needs its own plan.
The company that places the device on the market under its own name usually carries the manufacturer’s regulatory obligations, even when a contract factory builds it. The factory then becomes a critical supplier under that company’s quality system, with the controls and audits that implies.
Who owns what
Write the split down before the first purchase order. A typical allocation:
| Activity | Typical owner | What the factory contributes |
|---|---|---|
| Intended use, claims and classification | Brand, with a regulatory specialist | Awareness of the outcome, because it shapes everything below |
| Regulatory submissions and technical documentation | Brand as legal manufacturer, or an appointed specialist | Process descriptions, test records, supplier information |
| Design controls and risk management (ISO 14971) | Brand or its design partner | Manufacturing risk analysis, such as a process FMEA |
| Software lifecycle (IEC 62304) and cybersecurity | Whoever develops the firmware and apps | Controlled firmware loading and version records |
| Safety and EMC testing (IEC 60601-1, IEC 60601-1-2, IEC 60601-1-11 for home use) | Brand, through an accredited lab | Production-representative samples |
| Clinical or accuracy validation (for example ISO 81060-2 for blood pressure) | Brand, with clinical investigators | Units from a controlled build |
| Process validation, calibration and production records | Factory, under the brand’s oversight | Validation protocols, reports and per-unit records |
| Change control | Both, as set in the quality agreement | Notification and approval before any change |
Choosing a factory with the right quality system
Many capable consumer-electronics factories hold ISO 9001 but not ISO 13485. That may be enough for a wellness product, but a medical device usually needs a factory whose quality system already covers medical devices. In the US, FDA’s Quality Management System Regulation, in force since February 2026, incorporates ISO 13485 by reference, so the standard is now the common reference point in both the US and the EU. When reviewing a factory:
- Read the certificate’s scope: which product types, which processes and which sites. A certificate for one plant does not cover the sister plant across town.
- Ask which medical devices the factory builds today and for which markets.
- Ask whether it has been inspected by FDA or audited by a notified body, and how findings were closed. FDA publishes inspection outcomes for facilities it has inspected.
- Confirm it will accept audits from you, your notified body and regulators.
- Agree a quality agreement covering responsibilities, change notification, record retention, complaint support and corrective action.
The electronics factory audit checklist and the guide to supplier qualification evidence help turn these questions into a record you can defend.
Where accuracy is made: calibration and process validation
Measurement accuracy is designed in and then reproduced on the line, unit by unit:
- Blood pressure monitors need per-unit calibration of the pressure sensor against a reference, plus checks for air leaks and deflation behavior. Clinical validation applies to the algorithm with specific cuff sizes, so cuffs are part of the validated system, not a free accessory choice.
- Pulse oximeters get per-unit checks with a simulator, but their accuracy is established in clinical studies. Regulators, including FDA, have paid increasing attention to performance across skin pigmentation, so the validation population matters.
- Scales are calibrated with reference weights; see the smart scale guide.
- Thermometers are checked against temperature references with known uncertainty.
The reference equipment itself must be calibrated with traceability, and each unit’s record should identify which station and reference it was tested on. Processes whose output cannot be fully checked afterwards, such as sealing, welding or potting, are normally validated before production rather than inspected.
Connectivity and per-unit provisioning
Cellular devices (typically LTE-M or NB-IoT) avoid pairing and suit patients who do not use apps comfortably. They add a cellular module, carrier certification, SIM or eSIM provisioning, a data plan and exposure to network retirements over the device’s life. Bluetooth devices cost less per unit but rely on the patient’s phone or a home hub.
Either way, the factory record must link each serial number to its radio identifiers (IMEI and ICCID for cellular), firmware version and calibration data, so the device can later be assigned to a patient and traced if something goes wrong. Each unit should also carry unique credentials, with no shared default passwords, and accept only signed firmware.
Traceability and change control
In the US and the EU, most medical devices need a Unique Device Identifier (UDI) on the label and packaging, with records in the relevant database. Critical components, such as the pressure sensor, optical parts, battery and cuff, should be traceable by lot to the finished unit.
Change control is where consumer habits do the most damage. Swapping a sensor, a regulator or a tubing material for an “equivalent” part can affect accuracy or safety, and may need assessment, re-verification or regulatory notification. The quality agreement should state that no change to parts, processes, sites or sub-suppliers happens without written approval, and the engineering change process should be agreed before pilot production.
Kitting, deployment and returns
RPM devices often reach patients through a care program rather than a store, which adds manufacturing work that consumer products do not have:
- Kitting. Devices may ship directly to patients with cuffs, batteries, instructions and sometimes a pre-activated connection, so the packing line becomes part of the product. Instructions must suit older users and people with limited vision or dexterity, which is also a usability question for the design file.
- Activation. Decide whether units are activated at the factory, at a fulfillment center or on first use, and which records each step creates.
- Returns and redeployment. Programs frequently collect devices when a patient leaves and issue them to someone else. Cleaning between patients needs validated instructions, and any refurbishment, such as replacing cuffs or batteries and re-checking calibration, should run under a documented process within the quality system, not as an informal repair bench.
Plan these flows with the factory early, because they affect labeling, packaging and the production record.
Questions to ask a potential manufacturing partner
- Which medical devices do you build today, for which markets, under which certificate scope?
- Who on your side owns quality agreements, complaint handling and corrective actions?
- How are measuring units calibrated, with which references, and where are the records kept?
- How do you control and notify component and process changes?
- Can you print and verify UDI labels and keep per-unit records?
- Will you host audits by our notified body or by FDA?
Where Zefinity helps
Zefinity works on the manufacturing side of an RPM program: finding OEM/ODM partners whose medical device experience and certificate scope fit your product (Connect), then coordinating NPI and change control with the chosen factory (Launch). Classification, submissions and clinical work stay with the qualified regulatory specialists you appoint.
Frequently asked questions
Is a remote patient monitoring device always a medical device?
Not always, but often. A device that measures a physiological parameter so a clinician can monitor a patient's condition is generally regulated as a medical device. A wellness product without medical claims may not be. The answer depends on intended use, claims and market, so get a written assessment from a qualified regulatory specialist before choosing a supplier.
Does an ISO 13485 certificate mean a factory can build my device?
It shows the factory runs a quality management system audited for medical devices, within the scope stated on the certificate. It does not show the factory has built a product like yours, or that your device is cleared for any market. Check the scope, the sites covered and recent audit history, then agree a quality agreement specific to your product.
Should an RPM device connect over cellular or Bluetooth?
Cellular removes phone pairing, which helps patients who are not comfortable with apps, but adds module cost, carrier certification, SIM provisioning and a data plan per device. Bluetooth to a phone or home hub costs less per unit but depends on the patient's setup. Many programs choose based on the patient population rather than on hardware cost.