You can see here [2] what entities HIPPA applies to. A app would probably fall under the rightmost "clearinghouse" column. But, that is only if the app receives

You can see here [2] what entities HIPPA applies to. A app would probably fall under the rightmost "clearinghouse" column. But, that is only if the app receives data from another cover entity. If the app uses data provided voluntarily from and by the user to the app, the app is not a covered entity. [1] [1] https://blog.focal-point.com/when-does-hipaa-apply-to-health-apps https://blog.focal-point.com/when-does-hipaa-apply-to-health... [2] https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html https://www.hhs.gov/hipaa/for-professionals/covered-entities...