Unlocking Health System Savings: Eliminating Zombie Apps with Jason Rose and Kevin Erdal

Health systems are losing millions to outdated software 'zombie apps.' Clearsense and nordic Consulting offer solutions for identifying and safely retiring these costly liabilities.">

August 26, 2025

Health systems across the nation may be unknowingly hemorrhaging millions of dollars annually due to the continued operation of outdated and underused software applications, often referred to as “zombie apps.” This startling revelation comes as industry experts emphasize the urgent need for a strategic overhaul of application portfolios.

The Hidden Cost of Legacy Software

Jason Rose, Chief Executive Officer at Clearsense, and Kevin Erdal, Senior Vice President at Nordic Consulting Partners, recently highlighted the pervasive issue of these redundant applications. These “zombie apps” not only represent a significant financial drain but also introduce substantial cybersecurity vulnerabilities. According to a recent report by Flexera, organizations waste an average of 30% of their software budget on unused or underutilized licenses.

The problem stems from a long history of system implementations, mergers, and acquisitions, leaving organizations with a complex web of applications, many of which are no longer fit for purpose.These applications often lack ongoing maintenance and support, making them prime targets for cyberattacks.

Strategies for Application Retirement

Clearsense and Nordic Consulting have pioneered approaches to identify and safely decommission these problematic applications. Their methodology focuses on a phased approach that includes detailed application assessments,data archiving,and strategic governance. The goal is to retire these apps while preserving crucial data accessibility. They emphasize that a speedy assessment is the first step towards uncovering substantial savings.

This cost-saving strategy enables healthcare providers to streamline operations and redirect funds toward innovation and future technological investments. According to healthcare IT News, hospitals are increasingly prioritizing digital change, making efficient resource allocation even more critical.

Understanding the Risks and Rewards

The table below summarizes the key benefits of addressing the “zombie app” problem:

Area	Risk of Inaction	Benefit of Resolution
Financial	Millions in wasted licensing and maintenance fees	Significant cost savings for reinvestment
Security	Increased vulnerability to cyberattacks	Reduced attack surface and improved data protection
Operational	Complexity and inefficiency	Streamlined workflows and improved productivity

Did You Know? A recent study by Gartner estimates that up to 80% of applications used by organizations are rarely or never used.

Pro Tip: Begin with a small-scale pilot project to demonstrate the value of application retirement before embarking on a large-scale initiative.

Ultimately, tackling the issue of “zombie apps” requires a commitment to proactive application lifecycle management. Healthcare systems must continuously evaluate their software portfolios and eliminate redundancies to maximize efficiency and minimize risk.

What steps is your association taking to address redundant software applications? How confident are you in your current cybersecurity posture regarding legacy systems?

The Growing Importance of Application Portfolio Management

Application portfolio management (APM) has become increasingly critical in today’s rapidly evolving technological landscape. Organizations are facing a growing number of applications, making it challenging to maintain oversight and optimize resource allocation. A robust APM strategy not only identifies “zombie apps” but also ensures that all applications are aligned with business objectives and delivering maximum value.

The rise of cloud computing and digital transformation initiatives are further accelerating the need for effective APM. Organizations are migrating to the cloud and adopting new technologies at an unprecedented rate,creating even more complexity.

Frequently Asked Questions About Zombie Apps

• What are “zombie apps”? These are outdated, underused, or redundant software applications that continue to consume resources within an organization.
• Why are zombie apps a security risk? They frequently enough lack regular security updates, making them vulnerable to cyberattacks.
• How can health systems identify zombie apps? Through detailed application assessments and usage monitoring.
• What is the first step in addressing this issue? Conducting a thorough application portfolio assessment.
• How does clearing zombie apps help innovation? It frees up financial resources that can be reinvested in new technologies.
• Is data loss a concern when retiring apps? Not if a robust data archiving strategy is in place.
• what role does governance play in maintaining a healthy application portfolio? strong governance ensures ongoing monitoring and proactive management of applications.

Share your thoughts and experiences in the comments below. How is your organization tackling the challenge of outdated software?

How can health systems establish clear criteria for identifying and decommissioning zombie apps, balancing cost savings with potential disruption to workflows?

The Epidemic of “Zombie Apps” in healthcare

The healthcare industry is facing a important, often overlooked, drain on resources: “zombie apps.” These are mobile applications – developed with good intentions, often at considerable expense – that are no longer actively used by patients or clinicians, yet continue to consume valuable IT budget, security resources, and potentially, patient data. The term, interestingly, echoes a historical context. Just as the word “zombie” originates from a blend of “Gott” (God) and “Fetisch” (fetish), representing a loss of life and humanity, these apps represent a loss of investment and purpose. Jason Rose and Kevin Erdal are leading the charge in identifying and eliminating these digital liabilities within health systems.

What Defines a Healthcare “Zombie App”?

Identifying a zombie app isn’t always straightforward. Several key characteristics define them:

Low Utilization: Fewer than a predetermined percentage of the target user base actively uses the app (e.g., less than 5% monthly active users).

Lack of Integration: The app doesn’t seamlessly integrate with core Electronic Health record (EHR) systems or other critical healthcare IT infrastructure. This creates data silos and workflow disruptions.

Security Vulnerabilities: Outdated apps,lacking regular security updates,pose a significant risk to patient data and system integrity. Healthcare cybersecurity is paramount.

Maintenance Costs: Ongoing maintenance, hosting, and support costs outweigh the app’s value.

Duplication of Functionality: The app’s features are already adequately covered by other, more widely used applications.

The Financial impact of Inactive Healthcare Apps

The cost of maintaining these unused applications is substantial. Consider these factors:

1. Licensing fees: Annual or ongoing subscription costs for software licenses.
2. IT Support: staff time dedicated to troubleshooting, maintenance, and security patching.
3. infrastructure Costs: Server space, bandwidth, and other infrastructure resources consumed by the app.
4. Security Remediation: Costs associated with addressing vulnerabilities and potential data breaches.
5. Possibility Cost: Resources diverted from more valuable projects and innovations.

Rose and Erdal emphasize that these costs accumulate quickly, potentially reaching hundreds of thousands or even millions of dollars annually for large health systems. This wasted expenditure directly impacts the ability to invest in digital health innovation and improve patient care.

A Strategic Approach to Zombie App Elimination

Successfully eliminating zombie apps requires a systematic and data-driven approach. Here’s a breakdown of key steps:

Complete App Inventory: the first step is to create a complete inventory of all mobile applications used within the health system. This includes apps developed in-house,purchased from vendors,and those used by individual departments.

Usage Analytics: Implement robust analytics tracking to monitor app usage patterns. Key metrics include downloads, active users, session duration, and feature utilization.

Risk Assessment: Evaluate each app’s security posture,compliance with regulations (HIPAA,GDPR),and potential impact on patient safety.

Stakeholder Engagement: Involve clinicians, IT staff, and administrators in the evaluation process. Gather feedback on app usability, value, and potential alternatives.

Decommissioning Plan: for apps identified as zombies, develop a detailed decommissioning plan that includes data migration, user communication, and security considerations.

The Role of Jason Rose and Kevin Erdal

Jason Rose, a recognized expert in healthcare technology and digital strategy, and Kevin Erdal, a seasoned healthcare IT leader, have been instrumental in raising awareness about the zombie app problem. Their work focuses on providing health systems with the tools and methodologies to:

Conduct thorough app assessments.

Develop data-driven decommissioning strategies.

Optimize IT spending and resource allocation.

Improve cybersecurity posture.

Foster a culture of continuous enhancement in digital health.

They advocate for a proactive approach to app management, emphasizing the importance of regular audits and ongoing monitoring.

Benefits of Eliminating Zombie Apps

The benefits of a prosperous zombie app elimination program are significant:

Cost Savings: Reduced IT spending on licensing, maintenance, and infrastructure.

Enhanced Security: Minimized risk of data breaches and security vulnerabilities.

Improved Efficiency: Streamlined IT operations and reduced administrative burden.

Increased Innovation: Freed-up resources for investment in new technologies and initiatives.

Better Patient Experience: Focus on high-value apps that directly improve patient care and engagement. Patient engagement apps that are used become more effective.

Practical Tips for Health Systems

Establish a dedicated App Governance Committee: This committee should be responsible for overseeing app selection,evaluation,and decommissioning.

Implement a “Sunset Policy”: Define clear