[roegerle]

So HIPAA isn't rocket science and HHS provides plenty of HIPAA guidance. Kate's App isn't providing healthcare so HIPAA doesn't apply.

[otterley]

The site might be deemed a Business Associate, depending on the specific facts, which we don't fully possess. That's why I recommended the owner seek counsel.

[roegerle]

A business associate to who? The user?

[daveguy]

This is not true. I'm not a lawyer, but I am in the healthcare field.

HIPAA very much applies to this type of app or any other type of app that may deal in personally identifying information (PII) related to healthcare.

[roegerle]

I was too.

https://www.hhs.gov/hipaa/for-professionals/covered-entities...