On that account, any third party who handles this is going to have to be a completely HIPAA compliant outfit, as anyone who has any medical data is. The same legally mandated safeguards like the insurance company, third-party medical billing, pharmacy, clinic, private practice, etc. has to...