I've worked on some medical apps and software before, and IIRC, HIPAA is needed for data that has touched a doctor's system, so for EHRs, lab results and the li

I've worked on some medical apps and software before, and IIRC, HIPAA is needed for data that has touched a doctor's system, so for EHRs, lab results and the like you would certainly need to be compliant. Outside of those, I think fitness, sleep, and other data provided by third party apps and phones/trackers should be alright. But for this to truly be useful, in the future once EHRs are incorporated, compliance is a must.