Merely writing software doesn't make you a HIPAA covered entity. If you sell software to a covered entity then they're responsible for their own compliance. But

Merely writing software doesn't make you a HIPAA covered entity. If you sell software to a covered entity then they're responsible for their own compliance. But if you sell SaaS that handles protected data then you'll have to sign a Business Associate Agreement and take the required compliance steps yourself.