https://tino.design/blog/making-your-next-healthcare-startup-hipaa-compliant-essential-considerations