Medicines, blood, specimens, and defibrillators
The clock on a medical flight stops when a named person receives an intact, identified product. A release over a roof is not yet care.
A different kind of lateness
A retail parcel is late when a customer is annoyed. A medical parcel is late when a transfusion, a dose, or a laboratory decision is missed. That difference does not make every medical flight rational. It means the clock starts at the clinical request and stops when a named person has accepted an intact, identified product, not when the aircraft lets go of the box. If the receiver on the roof is at lunch, the drone has not delivered care. If the specimen sits warm on the pad, the laboratory may refuse it and the patient is sampled again. Time value is real only at the handoff the clinician actually uses.
The goods are not one product with different labels. Red cells, platelets, frozen plasma, tablets, vaccines, and biopsy pots do not share a temperature, an orientation, or an acceptable delay. A service built for a light pharmacy bag can be the wrong machine for blood. Whole blood and components in particular are easy to harm with heat, with freezing, or with a hard arrival. Chain of custody exists because a product that cannot be traced is a product the hospital should not use. The aircraft adds a pair of hands only if the record still shows who packed the item, what the temperature did in the air, and who signed it in without a broken seal.
Temperature, shock, and the record
Shock can spoil a payload that was packed correctly. A parachute drop, a hard landing, or a box that swings on a吊り索can damage blood cells, crack a vial, or trip a freeze indicator even when the airborne time was short. UNICEF's December 2018 vaccine flight in Vanuatu carried an electronic indicator because arrival is not the same statement as "it stayed in range." Many vaccines, and some blood components, are ruined by freezing as well as by heat. An ice pack chosen for a hot road can freeze a payload in cold air. Qualify the packed box on the real profile: climb, cruise, hover, and the drop or landing. A brochure that says the bay is chilled is not that test.
Custody is a procedure. The minimum record is the item identity, the batch or specimen number, the time of packing, the name of the packer, the planned and actual handoff points, and the temperature evidence. If the container can be opened only at the two ends of the route, write that down, and write what happens when the aircraft lands at the wrong pad. A lost-link return to the sender is both a safety behaviour and a custody event. The sender has to know the product is back, whether the seal is intact, and whether it is still fit to send. A second launch of a warmed unit, because nobody logged the first return, is an invented risk.
How a hospital actually receives it
Hospitals already receive helicopters, couriers, and tube systems. A drone is none of those by default. The roof may be a plant deck, a public terrace, or a helicopter pad with its own wake, its own signals, and its own right to refuse another aircraft. Staff need a named role, a phone or radio path that works when the flight is airborne, and a way to move the product into the pharmacy, the blood bank, or the laboratory without a walk through a public corridor. After-hours flights fail when the only trained receiver has gone home. Name the alternate before the flight is accepted, not when the aircraft is already overhead and short of battery.
The clinical service writes acceptance criteria in advance, and the flight manual copies them. A blood bank can reject a unit for temperature, leakage, or a broken seal. A laboratory can reject a haemolysed sample. A landing that hands over a product the desk must throw away is a failed mission, however smooth the approach looked. Measure turnaround against the road, boat, or courier time for that specific item, on days when that mode is actually running. A flight that beats a traffic jam and loses to the scheduled van is not yet an improvement. Publish the rejection rules next to the weather limits so operations and clinicians are not surprised by each other.
A defibrillator is not a blood box
An automated external defibrillator is time-critical in a different way. The patient is not waiting at a dock. Someone on scene has to see the aircraft or the drop, reach the device, and use it, while an ambulance is still coming. A release into a crowd, onto a roof the bystander cannot enter, or into water is not early defibrillation. The site has to be agreed, clear, and obvious, and the dispatch has to include a voice that can coach the bystander. The drone does not replace the ambulance. It can only move a device toward a person who is in a position to apply it. If that person and that place are not real, do not launch.
Blood, specimens, pharmacy bags, and defibrillators may share an operator. They should not share a loose claim that "medical drone delivery" is a single service. Each product has its own temperature band, its own shock limit, its own paperwork, and its own desk at the hospital or at the roadside. Write the one you actually serve. If you do not yet have a qualified box, a named receiver, and a rule for a rejected unit, you have a demonstration plan, not a clinical route. Say that plainly to the hospital. A future service is not a present authorisation to put a patient's sample in the air.
- UNICEF, Vanuatu vaccine flight, 18 December 2018
The packed vaccines carried an electronic indicator that triggers if temperature leaves the acceptable range. Arrival alone was not the control.