As patients increasingly permit access to their health information by way of third-party applications (apps), the need to ensure the privacy and security of this data has exponentially grown. Many of these apps are not covered entities under HIPAA and are not bound by any current privacy and security requirements