That quote about not being subject to HIPAA sounds suspect, but I guess it could be true as long as their terms and conditions are super explicit about not using the software for any real healthcare decisions, which it sounds like they are. But as soon as this shit does get used to diagnose something, deny or approve insurance coverage, or any of a large number of things, it will become a covered entity and will be subject to all HIPAA and PHI (protected health information) privacy regulations.
That quote about not being subject to HIPAA sounds suspect, but I guess it could be true as long as their terms and conditions are super explicit about not using the software for any real healthcare decisions, which it sounds like they are. But as soon as this shit does get used to diagnose something, deny or approve insurance coverage, or any of a large number of things, it will become a covered entity and will be subject to all HIPAA and PHI (protected health information) privacy regulations.