also be aware that some state privacy laws (I'm looking at you Texas!) are much more specific than hipaa and Emr/ehr vendors fall into a different kettle of fi

also be aware that some state privacy laws (I'm looking at you Texas!) are much more specific than hipaa and Emr/ehr vendors fall into a different kettle of fish for becoming meaningful use certified which is orthogonal to hipaa. i suspect most consumer health apps can ignore that, though