the method they get data is patient mediated, so they are not beholden to hipaa laws. we use the same method at 1uphealth to bring clinical data from health system records to app developers and patients