I think it might depend on whether or not U.S. insurance companies are involved. If so HIPAA is a real liability as a company. For example, a former colleague w

I think it might depend on whether or not U.S. insurance companies are involved. If so HIPAA is a real liability as a company. For example, a former colleague worked at a high profile private research facility that had their HIPAA firewall breached and their entire department was fired. Assuming that chat logs on these apps could fall into that same class of data in the U.S., that's a huge amount of risk/liability as a company.