If they don't take insurance (EDIT: insurance or medicare), they don't need to be HIPAA compliant.
EDIT: This is advice my HealthTech startup received from a very well respected lawfirm. It's not as black and white as this. However, it is a good rule of thumb.
EDIT: This is advice my HealthTech startup received from a very well respected lawfirm. It's not as black and white as this. However, it is a good rule of thumb.