Ask HN: HIPAA Compliance Client Work

I have a client that would like an app for managing their front of office work. He's a dermatologist.

I understand there's likely compliancy issues here. From what I've seen, it's not cheap to host patient data. Like, if I wanted to use Parse (RIP), I would need to host it on a server that meets HIPAA compliancy criteria, correct?

Anyone done work like this? My clients budget is a bit sensitive so, I'm curious how much something like this would cost to even develop for, much less deploying.