Internet of Medical Things (IoMT): Connected Devices in Healthcare

How connected medical devices are transforming patient monitoring, clinical workflows, and the future of care delivery — and what providers need to know to deploy them responsibly.

The stethoscope, invented in 1816, remained the defining symbol of medical technology for nearly two centuries. It extended the physician's senses — allowing them to hear what the naked ear could not — without changing the fundamental structure of care: a clinician, a patient, a moment of contact. Everything else flowed from that encounter.

The Internet of Medical Things is dismantling that structure entirely. Connected medical devices — wearables, implantables, remote monitoring systems, smart diagnostic tools, AI-enabled sensors — are extending clinical observation beyond the walls of the clinic and the moment of the appointment. They are turning the space between visits into a continuous stream of physiological data. They are making the patient's body legible to their provider not just during the fifteen-minute encounter but across the hours, days, and weeks that actually constitute their health.

This shift is not incremental. It is architectural. And understanding it — what IoMT devices exist, what they can genuinely do, what risks they introduce, and how to integrate them into care delivery responsibly — is becoming essential knowledge for every provider, practice manager, and health system leader operating in 2025 and beyond.

What IoMT Actually Is

The Internet of Medical Things refers to the network of connected devices, software applications, and infrastructure that collect, transmit, analyze, and act on health data outside the traditional clinical encounter. It is a subset of the broader Internet of Things — the general ecosystem of internet-connected physical devices — applied specifically to healthcare contexts and governed by the particular requirements of clinical data: accuracy, security, regulatory compliance, and clinical interpretability.

The scale of the IoMT ecosystem is difficult to overstate. Analysts estimate that there are now over 500 billion connected health devices globally, a number that is growing at a compound annual rate that outpaces virtually every other technology sector. The market value of IoMT is projected to exceed $860 billion by 2030. These numbers reflect not a single technology but an ecosystem of extraordinary diversity — from a $30 consumer fitness band to a $50,000 implantable cardiac monitor, from a blood glucose sensor worn on the upper arm to a hospital-grade ventilator with remote management capabilities.

What these devices share is the ability to generate health data continuously, transmit it digitally, and make it available — in real or near-real time — to clinicians, patients, algorithms, and care systems that can act on it. The clinical implications of this capability, applied across the full spectrum of care settings and patient populations, are profound.

The Core Categories of IoMT Devices

The IoMT ecosystem is broad enough that meaningful discussion requires organizing it into categories by function and care setting.

Wearable monitoring devices are the most visible and consumer-familiar segment of IoMT. Smartwatches and fitness bands capable of measuring heart rate, oxygen saturation, activity levels, sleep patterns, and increasingly ECG rhythm represent the consumer end of this spectrum. Clinical-grade wearables — continuous glucose monitors (CGMs) like the Dexterity G7 or Libre 3, ambulatory cardiac monitors, multi-parameter biosensor patches — represent the clinical end. The boundary between consumer and clinical wearables is blurring as regulatory pathways for software-based medical devices mature and as the accuracy of consumer sensors improves to clinical-grade standards in certain parameters.

Continuous glucose monitoring deserves particular attention as one of the most clinically validated and widely adopted IoMT applications. CGMs measure interstitial glucose every few minutes, transmit readings to a smartphone or dedicated receiver, and alert patients and providers to dangerous excursions — eliminating the periodic fingerstick that captured only a single moment in a dynamic physiological process. Their impact on glycemic management in both Type 1 and Type 2 diabetes is supported by robust clinical evidence, and their integration with insulin pumps in closed-loop systems represents the closest thing currently available to an artificial pancreas.

Implantable devices represent the most clinically intensive segment of IoMT. Cardiac pacemakers and defibrillators with remote monitoring capabilities transmit rhythm data daily to provider systems, allowing clinicians to detect arrhythmias, device malfunctions, and heart failure decompensation before they become emergencies. Implantable hemodynamic monitors — devices like the CardioMEMS sensor, implanted in the pulmonary artery — measure intracardiac pressures continuously and have been shown in randomized trials to reduce heart failure hospitalizations by enabling proactive medication adjustment before symptoms develop. Implantable neurostimulators, cochlear implants, and drug delivery systems with connected management interfaces round out this category.

Remote patient monitoring (RPM) systems are device ecosystems designed specifically for longitudinal monitoring of patients with chronic conditions outside the clinical setting. A typical RPM program for hypertension might include a connected blood pressure cuff that transmits readings to the clinical system daily, with AI-assisted alert rules that notify the care team when readings exceed defined thresholds. Similar programs exist for heart failure (daily weights, blood pressure, symptom questionnaires), COPD (oxygen saturation, respiratory rate), and post-surgical recovery. RPM has received significant reimbursement support from CMS in recent years, with dedicated CPT codes for device setup, patient education, and ongoing monitoring services — making it financially viable for practices of meaningful scale.

Point-of-care diagnostic devices bring laboratory and imaging capabilities into settings — the patient's home, the primary care office, the emergency department triage bay — where they were previously unavailable. Handheld ultrasound devices (Butterfly iQ, Philips Lumify) allow any trained clinician to perform real-time imaging without access to a dedicated radiology suite. Connected point-of-care analyzers deliver CBC, metabolic panel, troponin, and other results in minutes rather than hours. AI-assisted diagnostic tools — retinal cameras that screen for diabetic retinopathy, dermatoscopes that flag suspicious lesions, ECG devices that detect atrial fibrillation — extend specialist-level diagnostic capability into primary care settings.

Hospital and clinical facility devices include the connected equipment that makes modern inpatient care possible: patient monitoring systems, infusion pumps, ventilators, operating room equipment, and environmental sensors. These devices are the backbone of the connected hospital — generating continuous streams of patient data that feed into clinical decision support systems, alert clinicians to deterioration, enable remote specialist consultation, and provide the operational data that drives hospital efficiency. The integration of these devices with the electronic health record, and the security of the networks on which they operate, are among the most complex challenges in health IT.

Smart inhalers and medication adherence devices address one of the most significant clinical problems in chronic disease management: patients not taking their medications as prescribed. Connected inhalers track every actuation, recording when and how the device was used and transmitting this data to care teams and patients themselves. Medication adherence packaging with electronic monitoring provides similar data for oral medications. The clinical impact of these devices on adherence rates — and through adherence on outcomes — is one of the cleaner demonstrations of IoMT's potential to address problems that are invisible in the clinical encounter but enormously consequential over time.

Clinical Applications: Where IoMT Is Making a Measurable Difference

The catalog of IoMT devices is impressive, but the more important question is where these devices are demonstrably improving clinical outcomes — not just generating data.

Cardiovascular disease management is the area with the deepest evidence base. Remote cardiac monitoring has been shown to detect clinically significant arrhythmias — including atrial fibrillation — far earlier than symptom-based diagnosis, enabling earlier anticoagulation and stroke prevention. The CardioMEMS trial demonstrated a 28% reduction in heart failure hospitalizations in patients with implanted hemodynamic sensors compared to standard care. Cardiac rehabilitation programs incorporating wearable monitoring have shown improved adherence and outcomes compared to traditional center-based programs.

Diabetes management has been transformed by continuous glucose monitoring and closed-loop insulin delivery. Clinical trials consistently show that CGM use reduces time in hypoglycemia, improves HbA1c, and reduces diabetes distress — benefits that are particularly pronounced in patients who previously struggled with fingerstick-based monitoring. The integration of CGM data into EHR systems, allowing providers to review glucose patterns during office visits rather than relying on patient recall, has meaningfully improved the quality of diabetes consultations.

Chronic respiratory disease management with connected pulse oximeters and spirometers allows providers to detect COPD and asthma exacerbations earlier, initiating treatment before the patient requires emergency or hospital care. RPM programs for high-risk COPD patients have shown reductions in emergency department visits and hospitalizations in multiple studies.

Post-acute and surgical care represents one of the fastest-growing applications of IoMT. Continuous monitoring of post-surgical patients in the home — vital signs, activity, wound healing parameters — enables earlier detection of complications and more confident early discharge, reducing length of stay without compromising safety. For orthopedic patients, motion sensors and activity monitors provide objective rehabilitation progress data that supplements patient self-report.

Mental health monitoring is an emerging application with significant promise. Passive behavioral data — smartphone usage patterns, sleep, physical activity, social interaction — can serve as digital biomarkers for mood and mental health status, enabling earlier detection of depressive episodes, manic episodes in bipolar disorder, and psychotic prodrome. The ethical complexities of passive monitoring are substantial, but the clinical potential for a patient population where relapse often goes undetected until crisis is equally significant.

Maternal and neonatal care uses connected fetal monitoring devices, continuous glucose monitors for gestational diabetes, and home blood pressure monitoring for preeclampsia surveillance to extend high-risk obstetric monitoring beyond the clinic. Remote monitoring programs for high-risk pregnancies have been associated with earlier detection of complications and improved maternal outcomes in multiple health systems.

The Data Challenge: Volume, Integration, and Actionability

IoMT devices generate data at a scale that clinical systems — and clinicians — were not designed to handle. A patient with a cardiac implant, a CGM, an RPM blood pressure cuff, and a smartwatch might generate tens of thousands of data points per day. A hospital unit with 20 connected monitoring systems per bed generates data volumes that dwarf what any clinical team can review in real time.

The central challenge of IoMT is not generating data. It is transforming data into actionable clinical insight without overwhelming the clinicians who must act on it.

This requires three things working together. First, intelligent alert systems that filter the continuous data stream and surface only the observations that warrant clinical attention — reducing the alarm fatigue that is already a significant patient safety problem in hospital settings. Second, integration with the electronic health record, so that device data appears in the clinical context where it is most meaningful — alongside the patient's history, medications, and previous observations — rather than in a separate portal that clinicians must navigate to separately. Third, population-level analytics that allow care teams to monitor cohorts of patients proactively, identifying those at highest risk of deterioration before individual alerts are triggered.

The integration requirement is particularly important and frequently underestimated. A blood pressure reading transmitted from a home monitoring device that arrives in a separate vendor portal — disconnected from the patient's medication list, previous readings, and clinical notes — is far less actionable than the same reading arriving in the patient's EHR, contextualized alongside their clinical history and triggering a structured care team workflow. The technical and organizational work of achieving this integration across the heterogeneous IoMT device landscape is substantial, and it is where many IoMT implementations fall short of their clinical potential.

Platforms that unify patient data across care settings — connecting remote monitoring data, EHR, telemedicine, and clinical workflows within a single environment — are critical infrastructure for realizing IoMT's clinical value. Careexpand's integrated platform is designed precisely for this kind of continuity: ensuring that data generated between clinical encounters flows seamlessly into the care record and informs the next provider interaction, whether that interaction happens in the clinic, via video, or through an asynchronous message. When device data, clinical history, and provider communication exist in the same system, the care team sees a complete picture of the patient — not a series of disconnected data fragments.

Security and Privacy: The IoMT Risk Landscape

Connected medical devices expand the clinical capability of healthcare systems. They also expand the attack surface available to malicious actors — and the consequences of a security breach in a medical device context can extend beyond data exposure to direct patient harm.

The security challenges of IoMT are distinct from those of conventional health IT in several important ways. Many IoMT devices — particularly older implantables, legacy hospital equipment, and consumer wearables — were designed without security as a primary consideration. They may run outdated operating systems that cannot be patched, use unencrypted communications protocols, have hardcoded credentials, or lack authentication mechanisms that would be standard in any modern software system. The FDA's guidance on medical device cybersecurity has strengthened considerably in recent years, and the 2023 Consolidated Appropriations Act introduced new requirements for cybersecurity in premarket submissions — but the installed base of legacy devices with poor security characteristics remains large.

The network architecture of connected medical devices creates additional risk. Devices that communicate via Bluetooth, Zigbee, or Wi-Fi introduce wireless attack vectors. Devices connected to hospital networks may serve as entry points for attacks targeting the broader clinical IT environment — as demonstrated by multiple real-world incidents in which hospital network compromises originated through connected medical equipment. Network segmentation — isolating IoMT devices on dedicated network segments separate from clinical workstations and EHR systems — is a foundational security control that many healthcare organizations have not yet fully implemented.

Patient data generated by IoMT devices is subject to the full scope of HIPAA and GDPR protections. This creates compliance obligations at every point in the data lifecycle: collection, transmission, storage, access, and retention. Consumer health devices — smartwatches, fitness bands, consumer CGMs — occupy a regulatory grey area, as they may not be subject to HIPAA even when they generate health-relevant data, depending on how that data is used and who processes it. The Federal Trade Commission has increasingly asserted jurisdiction over consumer health data practices, but the regulatory framework remains unsettled.

Consent and data governance deserve particular attention as IoMT deployments scale. Patients must understand what data their connected devices are collecting, who has access to it, how long it is retained, and how it may be used — including whether it may be used for AI model training, research, or secondary commercial purposes. Obtaining and documenting meaningful informed consent for continuous passive monitoring is operationally more complex than consent for a discrete clinical procedure, and the processes supporting it must be designed accordingly.

Regulatory Framework: Navigating FDA, CE, and Beyond

IoMT devices are regulated as medical devices in most jurisdictions, with the specific regulatory pathway depending on the device's intended use, the clinical risk it poses, and the degree to which software constitutes its primary function.

In the United States, the FDA classifies medical devices into three classes based on risk. Class I devices (lowest risk, such as elastic bandages) require general controls only. Class II devices (moderate risk, such as blood pressure monitors and many connected wearables) require 510(k) premarket notification, demonstrating substantial equivalence to a legally marketed predicate device. Class III devices (highest risk, such as implantable cardiac defibrillators) require premarket approval (PMA), the most rigorous regulatory pathway, requiring clinical trial evidence of safety and effectiveness.

Software as a Medical Device (SaMD) — software intended to be used for a medical purpose without being part of a hardware medical device — is an increasingly important regulatory category as AI-powered diagnostic algorithms, clinical decision support tools, and mobile medical applications proliferate. The FDA's Digital Health Center of Excellence has developed specific guidance for SaMD, and the agency's approach to AI/ML-based devices — which may change their behavior over time based on new data — is an area of active regulatory development.

In the European Union, medical devices are regulated under the Medical Device Regulation (MDR, EU 2017/745) and the In Vitro Diagnostic Regulation (IVDR, EU 2017/746), which replaced the previous directives and introduced substantially more rigorous requirements for clinical evidence, post-market surveillance, and unique device identification. CE marking under the MDR requires conformity assessment by a Notified Body for most connected medical devices, and the clinical evidence requirements have increased significantly compared to the predecessor directives.

For health systems and practices deploying IoMT devices, the regulatory status of each device should be verified before clinical use, and the vendor's regulatory documentation — FDA clearance letters, CE certificates, conformity declarations — should be maintained as part of the device management program. Deploying a device for clinical purposes for which it has not been cleared or approved creates both patient safety risk and significant liability exposure.

Implementation Considerations for Healthcare Providers

Deploying IoMT effectively in a clinical setting requires more than selecting devices and connecting them to the network. It requires a structured implementation approach that addresses clinical workflow, patient selection, staff training, data governance, and ongoing performance monitoring.

Define the clinical use case precisely before selecting technology. The IoMT device market is large enough that technology selection should follow clinical need definition, not precede it. Which patient population? Which clinical parameters? What intervention is enabled by monitoring those parameters? What is the evidence that monitoring those parameters in that population produces better outcomes? Starting with these questions produces better IoMT programs than starting with a device catalog.

Design for the workflow, not around it. IoMT implementations that require clinicians to navigate to separate portals, manually download device data, or manage alert volumes that are incompatible with their existing workload will not sustain clinical adoption regardless of how compelling the underlying technology is. The device and its data must integrate into existing clinical workflows — ideally appearing in the EHR at the point where the clinician already works — or the workflow must be redesigned with staff input before deployment.

Establish clear protocols for alert management. Who receives alerts? By what channel? What action is required and within what timeframe? Who is responsible when the primary recipient is unavailable? Alert protocols must be defined, documented, and tested before devices are deployed to patients, and they must be realistic given the staffing capacity of the care team.

Invest in patient education and support. An RPM program in which patients do not understand how to use their devices, do not understand what data is being collected, or do not have a pathway to report technical problems will generate poor data quality and poor patient experience. Patient onboarding — explaining the purpose of monitoring, demonstrating device use, setting expectations about how data will be used and who will review it — is as important as device configuration.

Plan for device management at scale. As IoMT deployments grow, the operational complexity of managing device inventories, software updates, battery replacement, device returns, and technical support scales proportionally. A program that works with 20 patients may break at 200. Device management processes must be designed for the intended scale from the outset.

Monitor program performance continuously. Patient engagement rates (are patients using their devices?), data completeness (what percentage of expected readings are received?), alert response rates (what proportion of alerts are acted on within protocol-defined timeframes?), and clinical outcomes (are the outcomes the program was designed to improve actually improving?) should be tracked and reviewed regularly. IoMT programs that are deployed and then left unmonitored tend to drift — devices stop being used, alerts go unreviewed, and the clinical benefit evaporates while the administrative overhead persists.

Equity and Access: IoMT's Unfinished Problem

The promise of IoMT — continuous, personalized, proactive care that extends beyond the clinical encounter — is not equally distributed. The populations most likely to benefit from connected monitoring are often the least able to access it.

Effective IoMT use requires reliable broadband connectivity — still unavailable to millions of rural and low-income households in the United States and across much of the world. It requires smartphone ownership and digital literacy — less common among older adults, lower-income populations, and communities with limited technology exposure. It requires the ability to manage devices, charge batteries, troubleshoot technical problems, and navigate patient-facing apps — a set of capabilities that cannot be assumed across the full diversity of patient populations.

Device cost remains a significant barrier even as prices decline. Consumer wearables are increasingly affordable, but clinical-grade monitoring systems — particularly those requiring professional setup and ongoing support — carry costs that are prohibitive without insurance coverage or program subsidy. CMS RPM reimbursement has improved the economics for Medicare patients, but coverage gaps remain for Medicaid beneficiaries and the uninsured.

The risk that IoMT exacerbates existing health inequities — providing sophisticated, continuous monitoring to well-resourced patients with reliable connectivity and digital literacy while leaving the highest-risk, most underserved patients on the traditional episodic care model — is real and documented. Responsible IoMT program design must actively address this risk: through device lending programs, connectivity support, multilingual patient interfaces, simplified device designs optimized for lower digital literacy, and deliberate outreach to underserved populations.

Algorithmic bias in AI-powered IoMT analytics — systems that perform differently across racial, ethnic, or demographic groups because of skewed training data — is an additional equity concern that requires ongoing monitoring and mitigation. The pulse oximetry accuracy gap in patients with darker skin tones, documented extensively during the COVID-19 pandemic, is a vivid illustration of what happens when device performance assumptions embedded in product design are not rigorously validated across diverse populations.

The Road Ahead: Where IoMT Is Going

Several trajectories are clear enough to shape planning decisions for healthcare organizations investing in connected device programs today.

AI integration will deepen substantially. The combination of continuous physiological data streams with increasingly capable machine learning models will enable earlier, more accurate detection of clinical deterioration — not just threshold-based alerts when a value exceeds a predefined limit, but pattern-based prediction that identifies the trajectory toward deterioration before any single measurement crosses a danger threshold. Sepsis prediction, heart failure decompensation forecasting, and hypoglycemia prediction algorithms are already in clinical use; the next generation will be more accurate, more generalizable, and more integrated with clinical workflow.

The distinction between consumer and clinical devices will continue to blur. As regulatory pathways for software-based medical devices mature and as major consumer technology companies — Apple, Google, Samsung — invest in clinical-grade sensor validation, the accuracy gap between consumer wearables and dedicated clinical monitoring devices will narrow for many parameters. This will expand the population that can be meaningfully monitored without the cost and complexity of dedicated clinical device programs.

Interoperability will improve — slowly. The HL7 FHIR standard for health data exchange is creating a foundation for more seamless data flow between IoMT devices, EHR systems, and population health platforms. The pace of adoption varies widely across vendors and health systems, and the organizational and commercial barriers to true interoperability are as significant as the technical ones. But the direction is clear: closed, proprietary device ecosystems that cannot share data with the broader clinical environment will lose ground to open, interoperable systems that can.

The regulatory environment will tighten. The FDA's evolving guidance on AI/ML-based medical devices, the EU AI Act's high-risk classification for AI systems used in healthcare, and growing legislative interest in health data privacy will collectively raise the compliance requirements for IoMT deployment. Organizations that build governance frameworks for connected devices now will be better positioned than those who treat compliance as a retrospective concern.

IoMT as Infrastructure for the Future of Care

The Internet of Medical Things is not a feature of modern healthcare. Increasingly, it is the infrastructure on which modern healthcare runs — the nervous system that connects the clinical encounter to the continuous reality of the patient's health.

Practices and health systems that integrate connected monitoring thoughtfully into their care models — with clear clinical use cases, robust data integration, intelligent alert management, patient-centered education, and ongoing performance monitoring — will be able to deliver something genuinely new: care that is continuous, proactive, and personalized to the actual physiological reality of each patient, rather than to the snapshot captured in a periodic office visit.

That is a significant clinical advance. It is also an organizational and technological challenge of real complexity — one that requires not just the right devices but the right platform, the right workflows, and the right culture to sustain.

The practices that will lead in this environment are those that approach IoMT not as a technology deployment but as a care delivery redesign — starting with the patient, working backward to the data, and building the systems and processes that turn continuous measurement into continuous, meaningful care.

The connected device is not the innovation. The care it makes possible is.

About Careexpand: Careexpand is a comprehensive SaaS platform integrating telemedicine, EHR, remote patient monitoring, and continuity of care tools — designed to help providers turn connected device data into coordinated, continuous care. Learn more at www.careexpand.com.

‍