As someone who has been in the "healthtech" area for several years now, none of this looks at all new to me. Am I missing something, or do companies typically play much more "fast and loose" with data than I've seen?
In my experience, you don't send data anywhere you don't have a BAA. Period, full stop.
In my experience, you don't send data anywhere you don't have a BAA. Period, full stop.