Navigating through the dark: getting medical device compliance right